UAC-0098

Reported Context (3)

WithSecure reports that an ISO builder used by GREYVIBE may have suspected ties to UAC-0098; this is not presented as confirmed direct involvement in GREYVIBE's operations. WithSecure Details GREYVIBE’s AI-Assisted Campaigns Targeting Ukraine
The article associates a unique ISO builder in early GreyVibe samples with UAC-0098, described as a group of former TrickBot members that targeted Ukraine at the start of the Russian invasion. GreyVibe Uses AI-Generated Lures and Custom Malware to Target Ukraine-Linked Organizations
WithSecure describes UAC-0098 as an activity cluster likely involving former TrickBot members and previously observed targeting Ukraine; the article says a unique ISO builder may be linked to its ecosystem. WithSecure Details AI-Enabled GreyVibe Campaigns Targeting Ukraine

Malware (4)

People (1)

Threat Actors (2)

MITRE ATT&CK (13)

Products (7)

Tools (8)

Industries (4)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.