Skip to content
Threat Feed
Subscribe

Actor

UAT-11795

1 brief RSS
high threat

UAT-11795 Deploys Starland RAT and WLDR Agent via Trojanized Software

UAT-11795, a sophisticated and financially motivated Russian-speaking threat actor, targets users in the U.S. and Europe with trojanized software installers to deploy custom Python-based Starland RAT and an in-memory PowerShell WLDR agent for credential theft and cryptocurrency exfiltration.

exploited Webex +2 UAT-11795 financially-motivated rat c2 trojan windows python powershell
2r 6t