Tag: giftedcrook

2 Attack Reports | 0 Vulnerabilities

Attack reports

Obfuscation Without Effort: Breaking a GIFTEDCROOK Stealer

A fresh GIFTEDCROOK stealer variant was identified as part of a UAC-0226 campaign targeting Ukraine. Initial access leverages CVE-2025-6218 and CVE-2025-8088 through a weaponized RAR archive containing a decoy PDF themed around military registry information. The attack chain uses an LNK file to exe…
stealer
data exfiltration
rc4 encryption
giftedcrook
CVE-2025-8088
CVE-2025-6218
2026-04-13
phishing campaign
powershell payload
ukraine targeting
winrar exploitation
Published: April 13, 2026
Linked vulnerabilities : CVE-2025-8088, CVE-2025-6218
Downloadable IOCs: 4

Strategic Pivot: From Browser Stealer to Data Exfiltration Platform During Critical Ukraine Negotiations

The cyber-espionage group UAC-0226 has significantly evolved its GIFTEDCROOK malware from a basic browser data stealer to a robust intelligence-gathering tool. Three versions were identified between April-June 2025, with the latest iterations capable of exfiltrating a wide range of sensitive docume…
ukraine
data exfiltration
telegram
geopolitical
spear-phishing
cyber-espionage
2025-06-27
giftedcrook
Published: June 27, 2025
Linked vulnerabilities : CVE-2025-5777 (CVSS 9.3)
Downloadable IOCs: 11
Click here to see more Attack Reports