UAT-11795
- Origin
- RU
- Profile updated
- 2026-07-28 03:00:02
Context
UAT-11795 is a sophisticated, Russian-speaking, financially motivated adversary conducting malicious campaigns targeting users in the U.S. and Europe since June 2025. The actor employs CastleStealer and Remcos RAT as alternative payload implants. Their operations indicate a focus on financial gain through targeted attacks.
Reports & references
- Cisco Talos — Uat 11795 Deploys Novel Starland Rat And Bespoke Wldr C2 Implant In Financially Motivated Campaign (report)