UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

**UAC-0099 / Earth Sirrush and ASHVEIN:** A Russia-aligned APT actor (UAC-0099) is linked to a new .NET infostealer/RAT named ASHVEIN (TelemetryBrowser) used against Ukrainian government and logistics targets; ASHVEIN provides credential theft, screenshot capture, file collection, PowerShell remote shells, system fingerprinting, and encrypted C2, and is delivered via DLL sideloading, VHD containers, and .NET droppers while the actor continues to evolve its toolset and evasion techniques.