Choose how you want to continue.
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
Threats
rat
Cisco Talos Antivirus
Cisco Talos DNS Security
Cybersecurity
malware
Remote Access Trojans
financial crimes
Summary
Cisco Talos reveals a sophisticated financial cyber campaign by the Russian-speaking group UAT-11795, targeting users in the U.S. and Europe since June 2025, utilizing a novel remote access tool (RAT) and a bespoke command-and-control (C2) implant.
MORE POSTS LIKE THIS
security: ACR Stealer: Two observed intrusion chains amid increased threat activity
Sujith Quintelier ·
Jul 17, 2026
BlackToad Threat Actors Deploy Stealthy Phishing Lures
Securityonline ·
Jun 2, 2026
From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat
Blog Talosintelligence ·
May 19, 2026
Admitting the Elephantine Void Between Kinetic and Cyber Threats
Flying Penguin Blog ·
Jul 22, 2026
Fake GitHub repositories exploit developer trust to spread malware
Developer Tech ·
Jul 17, 2026
AUTHOR
BLOG POST FEATURED ON
Add this plugin to your blog