UAC-0020, also known by its aliases Vermin and SickSync, is a cyber-espionage threat actor linked to the security agencies of the Luhansk People's Republic and believed to operate under the direction of the Moscow government, actively participating in Russia's cyber warfare against Ukraine. The group first emerged with observed activity tracing back to October 2015, and its primary motivation is intelligence gathering and cyber-espionage against Ukrainian entities, including military, governmental, and critical infrastructure sectors. This group is distinct for its persistent use of spear-phishing campaigns combined with custom malware like SPECTR and repurposed legitimate tools such as SyncThing for data exfiltration, often returning after periods of inactivity to conduct new operations.

Aliases del actor

SickSyncVermin

Actores similares

uac-0008actor · 1UAC-0194apt · 0UAC-0185apt · 0UAC-0219apt · 0UAC-0149apt · 0UAC-0215apt · 0UAC-0006apt · 0UAC-0226apt · 0Guacamayaapt · 0UAC-0063apt · 0