Ukrainian Cyber Alliance

Also known as UCA

Cyber Alliance is a hacktivist group that has demonstrated capabilities in exploiting vulnerabilities, such as CVE-2023-22515 in Confluence, to escalate privileges and access targeted infrastructure. They successfully accessed Trigona's systems, exfiltrating sensitive data and ultimately defacing and deleting the organization's site.

Recent activity

No posts or advisories have named this actor recently.

References

• https://unit42.paloaltonetworks.com/unit-42-ransomware-leak-site-data-analysis/
• https://securelist.com/cyber-anarchy-squad-attacks-with-uncommon-trojans/114990/
• https://www.darkowl.com/blog-content/what-are-cves/

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.