TA445 Targeting Government and Military Sectors in Ukraine and Poland

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

TA455 conducts ongoing campaigns targeting government entities, military organizations, and civilians in Ukraine and Poland to steal information and establish remote access, using multi-stage infection chains and payloads like AgentTesla RAT, Cobalt Strike, and njRAT.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.