⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Cisco Talos discloses UAT-11795, a Russian-speaking financially motivated adversary targeting users in the US and Europe since June 2025. The group delivers a Python-based RAT called Starland RAT and a PowerShell-based C2 memory implant known as WLDR agent.
A financially motivated Russian-speaking threat actor, tracked as UAT-11795, has been conducting a campaign targeting users in the U.S. and Europe since at least June 2025. The group deploys a Python-based remote access trojan (RAT) called "Starland RAT" and a sophisticated PowerShell-based C2 memory implant known as "WLDR agent," which features encrypted beaconing, task queuing, and a Runspace execution engine for additional payloads.
Cisco Talos discloses UAT-11795, a Russian-speaking financially motivated adversary targeting users in the US and Europe since June 2025. The group delivers a Python-based RAT called Starland RAT and a PowerShell-based C2 memory implant known as WLDR agent.
Disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been conducting a malicious campaign targeting users in the U.S. and Europe since at least June 2025. Talos has discovered that the actor in this...
Attack using previously unseen ransomware payload occurred in June 2026.
A new stealthy ransomware named Spirals was used in an attack against an Asian IT company in June 2026. The sophistication of the operators points to the likelihood of wider campaigns in the future.