Threat Actor
UAT-8099
- First Reported
- Apr 29, 2026
- Latest Reported
- Apr 29, 2026
Reported Context (1)
- The article identifies UAT-8099 as a threat actor reportedly targeting vulnerable IIS servers in Asia, using web shells, PowerShell, GotoHTTP, and BadIIS variants. WhoisXML API Expands UAT-8099 Infrastructure Findings With DNS and WHOIS Analysis
Malware (1)
MITRE ATT&CK (4)
Products (1)
Tools (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.