Ukraine Warns of Surge in Cyberattacks on Hospitals, Local Governments by UAC-0247 Hackers
ID: bb0bda26-b50d-51ba-9681-d918ef4703ff
STIX ID: report--bb0bda26-b50d-51ba-9681-d918ef4703ff
Feed Name: The Cyber Express
Threat Score
**Executive summary:** CERT-UA reports a surge (Mar–Apr 2026) in phishing-driven attacks by cluster UAC-0247 targeting Ukrainian healthcare, emergency services and municipal bodies; attackers use humanitarian-aid lures to deliver multi-stage loaders and custom backdoors (e.g., AGINGFLY, SILENTLOOP), perform credential theft and lateral movement, and in some cases trojanize legitimate software for cryptomining or DLL sideloading against defense-related users.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.