UAC-0219 Attack Detection: A New Cyber-Espionage Campaign Using a PowerShell Stealer WRECKSTEEL - SOC Prime Detect UAC-0219 attacks with Powershell stealer WRECKSTEEL covered in the CERT-UA#14283 alert with Sigma rules from SOC Prime Platform.

In March, #CERTUA observed cyber-espionage attacks against Ukrainian state bodies and critical infrastructure by #UAC0219 spreading #WRECKSTEEL stealer for data theft. Detect potential intrusions with #Sigma rules from SOC Prime Platform.
socprime.com/blog/detect-...