UAT-11795 - f4n6

notes

UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

1. Executive summary Cisco Talos has disclosed a financially motivated campaign by threat actor UAT-11795 distributing trojanized installers for widely used software (MobaXterm, WebEx, Zoom,

17 Jul 2026 · 12 min read read →

notes

Begun, the Patch Wars have

1. Executive summary Cisco Talos has disclosed an active, financially motivated campaign by actor "UAT-11795" (no MITRE ATT&CK profile — attribution unconfirmed)

16 Jul 2026 · 9 min read read →

notes

Russian hackers trojanize WebEx, Zoom apps to push Starland malware

1. Executive summary A financially motivated Russian threat actor tracked as "UAT-11795" is distributing trojanized installers for common enterprise and developer software — including

16 Jul 2026 · 7 min read read →