UAC-0006 is a financially motivated threat actor, believed to be aligned with Russian interests, which primarily targets Ukrainian organizations for monetary gain. Although initially characterized as a cyber espionage group, its observed operations, active since at least 2013, consistently focus on compromising financial systems and stealing credentials. The group is distinct from the cyber espionage threat actor often known as Armageddon or Gamaredon (UAC-0010), despite some initial conflation; UAC-0006 operates under aliases such as Smoky Spider and is known for its persistent campaigns distributing the SmokeLoader malware. Its defining characteristic is the continuous, high-volume targeting of Ukrainian financial entities and accountants through sophisticated phishing campaigns.

Actores similares

uac-0008actor · 1UAC-0194apt · 0UAC-0185apt · 0UAC-0020apt · 0UAC-0219apt · 0UAC-0149apt · 0UAC-0215apt · 0UAC-0226apt · 0Guacamayaapt · 0UAC-0063apt · 0