10/ Deployed by #UAC-0219, #Wrecksteel exfiltrates documents and takes screenshots.

⚖️ INC #Ransomware Claims State Bar of #Texas: The second-largest US bar association confirmed a data breach after INC ransomware listed them on their leak site.

UAC-0219 Attack Detection: A New Cyber-Espionage Campaign Using a PowerShell Stealer WRECKSTEEL - SOC Prime Detect UAC-0219 attacks with Powershell stealer WRECKSTEEL covered in the CERT-UA#14283 alert with Sigma rules from SOC Prime Platform.

In March, #CERTUA observed cyber-espionage attacks against Ukrainian state bodies and critical infrastructure by #UAC0219 spreading #WRECKSTEEL stealer for data theft. Detect potential intrusions with #Sigma rules from SOC Prime Platform.
socprime.com/blog/detect-...