Malware
AGEWHEEZE
- First Reported
- Mar 30, 2026
- Latest Reported
- Apr 2, 2026
Reported Context (3)
- CERT-UA disclosed a phishing campaign that impersonated the agency to distribute a password-protected ZIP hosting a Go-based remote access trojan named AGEWHEEZE. CERT-UA Reports Few Confirmed Infections in AGEWHEEZE Phishing Campaign
- The archive installed a remote administration tool called AgeWheeze that enables full remote control, and attackers claiming to be CyberSerp later boasted of large-scale targeting though CERT-UA reported only a small Pro-Russian Hackers Impersonate Ukraine’s CERT-UA in AgeWheeze Phishing Campaign
- An unknown threat actor cloned the CERT-UA website and sent phishing emails distributing a passwordâprotected archive that installed AGEWHEEZE, a Goâbased remote access trojan. CERT-UA Reports Fake Website Used to Distribute AGEWHEEZE RAT in Ukraine
Threat Actors (3)
MITRE ATT&CK (5)
Vendors (1)
Products (1)
Industries (6)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
