All threat actors

UAC-0247

Alert me

A CERT-UA cluster whose 2026 activity was assessed to involve the same individuals as UAC-0244. It targeted Ukrainian government, healthcare, and FPV-drone operators with malicious LNK/HTA chains and AgingFly, stealing browser and WhatsApp data; exact links to other Russia-nexus clusters remain under study.

Create a free account to see the reports

Sign in or create a free account to see every report that names UAC-0247.

Create free account