Russia-linked APT UAC

Securityaffairs.Co •Pierluigi Paganini • January 5, 2026

Russia-linked APT UAC-0184 targets Ukrainian military and government bodies via Viber, delivering malicious ZIP files for espionage in 2025. Russia-linked threat actor UAC-0184 (aka Hive0156) is targeting Ukrainian military and government entities, using Viber messages to deliver malicious ZIP files as part of ongoing intelligence-gathering operations in 2025. “Recent monitoring data from the 360 Advanced […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

UAC-0184 Targets Ukrainian Military via Viber with Malicious ZIP Files The Russia-linked APT group UAC-0184 has been targeting Ukrainian military and government bodies through Viber, delivering malicious ZIP files for espionage purposes. This campaign, part of ongoing intelligence-gathering operations, was active throughout 2025, as reported by the 360 Advanced Threat Research Institute. 2 sources 37

Extracted Entities

Russia-linked APT UAC

The full story

Extracted Entities

APT Groups (2)

Attack Types (1)

Industries (1)

Platforms (1)