UAC-0094
- First seen
- 2023-01-01 00:00:00
- Origin
- RU
- Primary motivation
- espionage
- Sophistication
- intermediate
- Resource level
- government
- Actor type
- nation-state
- Profile updated
- 2026-07-07 12:07:24
Targeted industries: technology-and-telecommunications
Targeted regions: country_code:ua
Context
State Service of Special Communication and Information Protection of Ukraine spotted a new wave of cyber attacks aimed at gaining access to users’ Telegram accounts. The Ukrainian CERT attributes the hacking campaign to threat actors tracked as UAC-0094. Threat actors are targeting Telegram users by sending Telegram messages with malicious links to the Telegram website in order to gain unauthorized access to the records and transfer a one-time code from SMS.
Reports & references
- CERT-UA — 39253 (report)
- vulners.com — Thn:4C1C2Cd10F20E08Dd74D465450Df3F17 (report)