UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

A Russia-aligned threat actor, known as UAC-0099, has been linked to a newly discovered .NET infostealer and remote access trojan called ASHVEIN. This malware is being used to target Ukrainian government personnel. The threat actor is being tracked by TrendAI under the name Earth Sirrush, which was previously referred to as SHADOW-EARTH-065. ASHVEIN is a significant tool in the threat actor's arsenal, used for malicious activities. The malware's capabilities and tactics are notable, particularly its ability to hide commands in HTML. TrendAI's tracking of the cluster provides insight into the threat actor's activities.