Choose how you want to continue.
By continuing, you agree to our Privacy Policy.
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
Threats
rat
Cisco Talos Antivirus
Cisco Talos DNS Security
Cybersecurity
malware
threat-intelligence
financial crimes
Summary
Cisco Talos reveals a sophisticated financial cyber campaign by the Russian-speaking group UAT-11795, targeting users in the U.S. and Europe since June 2025, utilizing a novel remote access tool (RAT) and a bespoke command-and-control (C2) implant.
MORE POSTS LIKE THIS
security: Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
Sujith Quintelier ·
Sep 3, 2026
BlackToad Threat Actors Deploy Stealthy Phishing Lures
Securityonline ·
Jun 2, 2026
From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat
Blog Talosintelligence ·
May 19, 2026
Pluralistic: Israeli ad-tech company was a delivery system for "mercenary spyware" (17 Oct 2026)
Pluralistic: Daily links from Cory Doctorow ·
Oct 17, 2026
AUTHOR
BLOG POST FEATURED ON
Add this plugin to your blog