[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIb2llANIlH5f6hGB1PsPI2knbI4n4tTMyq4S1PSJsYo":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":10,"target_industries":11,"target_countries":12,"incident_types":13,"references":14,"techniques":17,"technique_count":18,"created_at":19,"seoMetadata":20,"schemaOrg":24},"UAC-0102","uac-0102",[],"UAC-0102 is a threat actor group targeting UKR.NET users through phishing attacks. They distribute emails with HTML file attachments that redirect users to a fraudulent website to steal authentication data. Security teams can use Sigma rules to detect their phishing campaigns and leverage IOCs provided by CERT-UA to hunt for their activity in SIEM or EDR environments.",null,[],[],[],[15,16],"https:\u002F\u002Fsocprime.com\u002Fblog\u002Fuac-0102-phishing-attack-detection-hackers-steal-authentication-data-impersonating-the-ukr-net-web-service\u002F","https:\u002F\u002Fcert.gov.ua\u002Farticle\u002F4928679",[],0,"2024-07-28T01:15:03.89942+00:00",{"title":21,"metaDescription":22,"keywords":23},"UAC-0102 Threat Actor Profile | EdgeProtect","UAC-0102 is a threat actor group targeting UKR.NET users through phishing attacks. They distribute emails with HTML file attachments that redirect use...","UAC-0102, threat actor, APT, cyber threat, threat intelligence",{"@context":25,"@type":26,"name":6,"alternateName":27,"description":9,"url":28,"mainEntityOfPage":29},"https:\u002F\u002Fschema.org","Organization",[],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fuac-0102",{"@type":30,"@id":28},"WebPage"]