Choose how you want to continue.
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
Threats
rat
Cisco Talos Antivirus
Cisco Talos DNS Security
Cybersecurity
malware
threat-intelligence
financial crimes
Summary
Cisco Talos reveals a sophisticated financial cyber campaign by the Russian-speaking group UAT-11795, targeting users in the U.S. and Europe since June 2025, utilizing a novel remote access tool (RAT) and a bespoke command-and-control (C2) implant.
MORE POSTS LIKE THIS
security: ACR Stealer: Two observed intrusion chains amid increased threat activity
Sujith Quintelier ·
Jul 17, 2026
BlackToad Threat Actors Deploy Stealthy Phishing Lures
Securityonline ·
Jun 2, 2026
From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat
Blog Talosintelligence ·
May 19, 2026
Investigating three real-world incidents in our cybersecurity evaluations
simonw ·
Jul 31, 2026
Admitting the Elephantine Void Between Kinetic and Cyber Threats
Flying Penguin Blog ·
Jul 22, 2026
AUTHOR
BLOG POST FEATURED ON
Add this plugin to your blog