All actors

Ukrainian Cyber Alliance

Also reported as UCA. Linked to Ukraine by two sources.

Reports
8
Last reported
Known CVEs
3
Origin
Ukraine
ID
ukrainian-cyber-alliance
Sources
MISPMalpedia
Merge evidence
2 alias matches

Reports per quarter

  1. 2023 Q1: 1 report
  2. 2023 Q2: no reports
  3. 2023 Q3: no reports
  4. 2023 Q4: 1 report
  5. 2024 Q1: no reports
  6. 2024 Q2: no reports
  7. 2024 Q3: no reports
  8. 2024 Q4: 1 report
  9. 2025 Q1: 1 report
  10. 2025 Q2: no reports
  11. 2025 Q3: no reports
  12. 2025 Q4: no reports
  13. 2026 Q1: no reports
  14. 2026 Q2: 4 reports
Dated reports, 2023 Q1 to 2026 Q2.

Techniques seen in the last two years

Counts come from technique IDs in the actor's report text.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. SparkRAT (Malware Family)

    date ORKL added it fromORKL

  2. Revenge RAT (Malware Family)

    date ORKL added it fromORKL

  3. LockBit (Malware Family)

    date ORKL added it fromORKL

Newest first. Details opens the report in Explore.