UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

The Russia-aligned threat actor UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware has been used in attacks targeting Ukrainian government personnel. The cybersecurity company tracks the cluster under the name Earth Sirrush (previously SHADOW-EARTH-065).