MalwareBleeping Computer
8.5 — CRITICAL
Russian hackers trojanize WebEx, Zoom apps to push Starland malware
A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurrency by deploying a new backdoor called Starland RAT. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A financially motivated Russian threat actor, UAT-11795, is using trojanized WebEx and Zoom apps to deploy the Starland RAT backdoor, which steals credentials and cryptocurrency. The attacks have been occurring since at least June 2025 and have focused on users in the U.S., Germany, Romania, and Venezuela.
⚙️Technical Details
💥Impact Assessment
Severity: High
Who Is at Risk
Users of affected software in the U.S., Germany, Romania, and Venezuela
🛡️Recommended Actions
1Use IoCs from Cisco Talos report to detect and block attacks
2Avoid executing commands found online without understanding their purpose
3Download software only from confirmed official vendor portals
📦Affected Products
MobaXtermWebExZoomDBeaverFaceIT
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.