Operation DupeHike: DuperRunner Malware Targets Russian Corporate Employees
First seen 4 Dec 2025, 11:44 UTC
•
•81% similarity
•38
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Operation DupeHike is a sophisticated cyber attack campaign targeting employees in Russian corporate environments, particularly in human resources, payroll, and administrative departments. The campaign, attributed to the threat group UNG0902, employs weaponized documents themed around employee bonuses to deliver the DuperRunner malware, which is previously unknown.
ThreatCluster AI
How this analysis works