🇺🇦

UAC-0020

APT Group 17 zero-day CVEs

Also Known As 2 names

SickSync Vermin

Target Countries 1

Countries highlighted in red

Ukraine

Sectors Targeted

Periodical Publishers 51112 National Security and International Affairs 928110

Details

Origin 🇺🇦 UA

Last Updated 09 Jul 2024

MITRE ATT&CK 33

T1003 - OS Credential Dumping T1018 T1025 T1036 - Masquerading T1053 - Scheduled Task/Job T1056 T1059 - Command and Scripting Interpreter T1059.001 T1068 - Exploitation for Privilege Escalation T1071.001 T1078.003 T1082 - System Information Discovery T1083 T1105 T1112 T1113 T1114 T1115 T1134 - Access Token Manipulation T1140 - Deobfuscate/Decode Files or Information T1203 T1218 - Signed Binary Proxy Execution T1490 - Inhibit System Recovery T1496 - Resource Hijacking T1498 - Network Denial of Service T1553 - Subvert Trust Controls T1555 T1558 T1560 T1564 T1566 - Phishing T1566.001 T1567

Related Zero-Days 17

CVE-2022-3236 CVE-2023-20109 CVE-2023-20198 CVE-2023-22515 CVE-2023-38831 CVE-2023-46604 CVE-2023-4966 CVE-2024-21412 CVE-2024-23222 CVE-2024-38112 CVE-2024-38193 CVE-2024-4040 CVE-2024-43093 CVE-2024-43461 CVE-2024-47575 CVE-2025-1316 CVE-2025-27363