Threat Actor
UTA0355
- First Reported
- Apr 22, 2025
- Latest Reported
- Dec 4, 2025
Reported Context (2)
- Volexity attributed the Belgrade Security Conference and Brussels Indo-Pacific Dialogue phishing campaigns to this tracked Russian threat actor. Russian Threat Actor Uses Fake European Security Events in OAuth Phishing Campaigns
- Volexity tracks this actor behind an OAuth phishing campaign involving a compromised Ukrainian Government email account and device registration; Volexity assesses with medium confidence that it is Russian. Russian Actors Abuse Microsoft 365 OAuth Workflows to Phish Accounts
Threat Actors (1)
MITRE ATT&CK (6)
Vendors (1)
Products (7)
Tools (2)
Industries (2)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.