Zero-Day Threat: UAT-8837 Targets North American Infrastructure

UAT-8837, a China-linked APT, is actively targeting critical infrastructure in North America using possible zero-day exploits (including CVE-2025-53690) and primarily open-source tooling to harvest credentials and AD data, perform network tunneling, steal tokens and exfiltrate DLLs; these TTPs produce high risk for persistence, lateral movement, and future supply-chain compromises.