Threat actor

UAT-7237

In 3 briefs, most recently 19 August 2025. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. The Workday CRM breach, unpatched N-able N-central servers under active exploitation, and RansomExx's PipeMagic backdoor abusing a Windows flaw.
  2. Workday breach linked to Salesforce attacks, unpatched N-able N-central servers under active exploitation, and $2.8M seized from Zeppelin ransomware operator.
  3. The WarLock ransomware attack on Colt Technology, UAT-7237 APT breaches of Taiwanese web servers, and Cisco's patched critical FMC RADIUS flaw.