UAC-0245
Threat actors, tracked under the identifier UAC-0245 and targeting Ukraine, employ malicious XLL files disguised as critical documents.
origin (suspected)
Russia
source: misp-galaxy1 refs →
UAC-0245· Russia
UAC-0245 is a threat actor targeting Ukraine through attacks using malicious XLL files disguised as documents.
Analyst brief
UAC-0245 is a threat actor targeting Ukraine. This group employs malicious XLL files disguised as critical documents in their attacks. Defenders should focus on blocking XLL attachments in email and file-sharing systems, and on anti-phishing user awareness training.
unknown
FAQ2
What file type does UAC-0245 use in its attacks?
UAC-0245 employs malicious XLL files disguised as critical documents in their attacks.
What are the recommended defensive measures against UAC-0245?
Defenders should focus on blocking XLL attachments in email and file-sharing systems, and on anti-phishing user awareness training.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.