FlagThis

The Russia-linked APT group UAC-0063 is conducting a cyber espionage campaign targeting Kazakhstan and other Central Asian countries to gather economic and political intelligence. They are using spear-phishing tactics with weaponized Microsoft Office documents to deploy the HATVIBE malware and CHERRYSPY. The group has connections to APT28 and Russian GRU cyber activities.