UAC-0247 Hits Hospitals, Governments With Browser and WhatsApp Data Theft

Gbhackers •Mayura Kathir • April 16, 2026

A surge of targeted cyberattacks was detected against local governments and municipal healthcare institutions particularly clinical and ambulance hospitals. The campaign has been attributed to threat cluster UAC-0247, known for advanced data theft, persistence, and lateral movement methods. The attack chain begins with well-crafted phishing emails that appear to humanitarian aid proposals. These emails typically […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

UAC-0247 Cyberattacks Target Hospitals and Governments in Ukraine A series of cyberattacks attributed to the UAC-0247 threat cluster has been detected, primarily targeting local governments and municipal healthcare institutions in Ukraine, including clinical hospitals and emergency ambulance services. The attacks began in early 2026 and involve sophisticated data theft methods, specifically targeting sensitive information from internet browsers and WhatsApp. The initial attack vector consists of phishing emails disguised as humanitarian aid proposals, which facilitate the attackers' access to the networks. The attackers are noted for their persistence and lateral movement capabilities within compromised networks. The scope of the impact is significant, affecting critical infrastructure and sensitive data of healthcare providers. As of April 16, 2026, the attacks are ongoing, with no reports of containment or remediation measures disclosed. The situation poses a serious risk to patient data and operational integrity of healthcare services in the affected regions. 2 sources 73

UAC-0247 Hits Hospitals, Governments With Browser and WhatsApp Data Theft

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Industries (1)

MITRE ATT&CK (1)

Platforms (1)