Operation DupeHike Attacking Employees Using Weaponized Documents DUPERUNNER Malware

Cybersecuritynews •Tushar Subhra Dutta • December 4, 2025

A sophisticated attack campaign known as Operation DupeHike has emerged as a significant threat to Russian corporate environments, specifically targeting employees within human resources, payroll, and administrative departments. The campaign, attributed to the threat group UNG0902, leverages carefully crafted decoy documents themed around employee bonuses and internal financial policies to deliver a previously unknown malware […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Operation DupeHike: DuperRunner Malware Targets Russian Corporate Employees Operation DupeHike is a sophisticated cyber attack campaign targeting employees in Russian corporate environments, particularly in human resources, payroll, and administrative departments. The campaign, attributed to the threat group UNG0902, employs weaponized documents themed around employee bonuses to deliver the DuperRunner malware, which is previously unknown. 2 sources 38

Extracted Entities

Operation DupeHike Attacking Employees Using Weaponized Documents DUPERUNNER Malware

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Campaigns (1)

Countries (1)

Malware (1)