Tag: crookbag

1 Attack Reports | 0 Vulnerabilities

Attack reports

Targeted activity UAC-0212 against developers and suppliers of automation and process control solutions

In 2024-2025, UAC-0212, a subcluster of UAC-0002 (Sandworm), launched targeted cyberattacks against Ukrainian critical infrastructure and related industries. The actor employed new tactics, exploiting CVE-2024-38213 to deliver malware through PDF documents. Tools like SECONDBEST, EMPIREPAST, SPARK,…
sandworm
supply chain
CVE-2024-38213
2025-02-26
crookbag
Published: February 26, 2025
Linked vulnerabilities : CVE-2024-38213 (CVSS 6.5)
Downloadable IOCs: 112
Click here to see more Attack Reports