UAT-8099
UAT-8099 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Technology and Telecommunications sectors in Thailand and Vietnam. It uses 31 MITRE ATT&CK techniques.
- Techniques
- 31
- Exploited CVEs
- No CVE data
- First seen
- Apr 1, 2025
- Last seen
- Jan 29, 2026
- Record updated
Who They Target.
Sectors · 2
Countries · 2
Labelsbd:governance:curation:analyst-reviewed
About UAT-8099.
The group targets vulnerable Internet Information Services servers in Asia, with a particular focus on Thailand and Vietnam, to conduct SEO fraud and steal high-value credentials, configuration files, and certificate data for financial gain. Chinese-speaking code and tooling do not establish a China location, state nexus, or nation-state attribution.
Last updated Aug 6, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.