Malware
AgingFly
- First Reported
- Apr 15, 2026
- Latest Reported
- Apr 16, 2026
Reported Context (2)
- A new C# malware family called AgingFly has been used in Ukraine against local governments and hospitals to steal authentication data from Chromium-based browsers and the WhatsApp Windows client. AgingFly Malware Targets Ukrainian Governments and Hospitals to Steal Credentials
- Attackers deploy multi-stage loaders, custom executable formats and backdoors like AGINGFLY—alongside tools such as SILENTLOOP and RAVENSHELL—to gain persistent remote control, steal credentials, and deploy cryptominers. CERT-UA Reports UAC-0247 Campaign Targeting Ukrainian Hospitals and Government
Threat Actors (1)
MITRE ATT&CK (17)
Products (7)
Tools (8)
Industries (4)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.