TI Mindmap HUB
Threat Intelligence Report

UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

📅 July 18, 2026 📰 blog.talosintelligence.com 🔍 0 CVE(s) referenced

A Russian-speaking threat actor, UAT-11795, is targeting U.S. and European users with trojanized installers that deploy the novel Starland RAT and bespoke WLDR C2 PowerShell implant to steal credentials and cryptocurrency, leveraging resilient C2 infrastructure and Telegram bots for persistent, multi-stage attacks.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle