Skip to content

InvisiMole

InvisiMole is a Russia-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets the Government, and Defense and Aerospace sectors in Russia and Ukraine.

Also known as
  • UAC-0035
Origin
Russia
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2013
Record updated

Who They Target.

About InvisiMole.

This is the modus operandi of the two malicious components of InvisiMole. They turn the affected computer into a video camera, letting the attackers see and hear what’s going on in the victim’s office or wherever their device may be. Uninvited, InvisiMole’s operators access the system, closely monitoring the victim’s activities and stealing the victim’s secrets. The campaign is highly targeted, no wonder the malware has a low infection ratio, with only a few dozen computers being affected.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.