TA471 Targets Ukrainian Government Websites With Malware (CERT-UA6060)
The TA471 threat group also known as Ember Bear Lorec53 and UAC-0056 targeted Ukrainian government websites.
The operation used custom backdoors web shells and tunneling tools including CredPump HoaxPen HoaxApe Ngrok and Gost to carry out the infection process.
Featured Resources
View More Resources
Demo
From Vulnerability to Validation
See how Cymulate connects vulnerabilities to real attack scenarios to validate what’s actually exploitable.
Demo
Threat Validation Demo
See how Cymulate helps security teams quickly validate protection against new threats and get answers in minutes
Demo
From Control Validation to Exposure Validation
See how security teams move from control validation to true exposure validation using real-world attack scenarios