Dossier
UAT-11795
Coverage of UAT-11795 in the Nexus archive.
- Russian hackers trojanize WebEx, Zoom apps to push Starland malware
A financially motivated Russian threat actor, UAT-11795, is using trojanized WebEx and Zoom apps to deploy a new backdoor called Starland RAT, which steals credentials and cryptocurrency. The malware is part of a campaign targeting users through compromised software.