UnclassifiedUnknown
UAT-11795
UAT-11795 is a Russia-attributed threat actor group, tracked by Brandefense.
- Origin
- Russia
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About UAT-11795.
UAT-11795 is a sophisticated, Russian-speaking, financially motivated adversary conducting malicious campaigns targeting users in the U.S. and Europe since June 2025. The actor employs CastleStealer and Remcos RAT as alternative payload implants. Their operations indicate a focus on financial gain through targeted attacks.
Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.