[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZOvVauREJHhcD8qC5CkCajY4luVFpZkl-hxSwrg6gdM":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":14,"references":15,"techniques":17,"technique_count":18,"created_at":19,"seoMetadata":20,"schemaOrg":24},"UTA0355","uta0355",[],"UTA0355 is a Russian threat actor that conducts phishing campaigns targeting individuals and organizations associated with Ukraine. The actor initiates contact via email, inviting targets to a video conference, and follows up through Signal or WhatsApp to enhance legitimacy. After establishing communication, UTA0355 prompts victims to log in via a malicious M365 URL, subsequently requesting approval for a 2FA authentication to access email data. Volexity assesses with high confidence that UTA0355 successfully registered devices and downloaded email data from compromised accounts.","RU",null,[],[],[],[16],"https:\u002F\u002Fwww.volexity.com\u002Fblog\u002F2025\u002F04\u002F22\u002Fphishing-for-codes-russian-threat-actors-target-microsoft-365-oauth-workflows\u002F",[],0,"2025-05-14T01:15:07.206477+00:00",{"title":21,"metaDescription":22,"keywords":23},"UTA0355 Threat Actor Profile | EdgeProtect","UTA0355 is a Russian threat actor that conducts phishing campaigns targeting individuals and organizations associated with Ukraine. The actor initiate...","UTA0355, threat actor, APT, cyber threat, threat intelligence, RU",{"@context":25,"@type":26,"name":6,"alternateName":27,"description":9,"url":28,"mainEntityOfPage":29,"location":31},"https:\u002F\u002Fschema.org","Organization",[],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Futa0355",{"@type":30,"@id":28},"WebPage",{"@type":32,"name":10},"Country"]