Russian Hacker Group UAC-0050 Targets European Financial Institutions With Fake Official Emails Spreading RMS

UAC-0050, a Russian hacker group tracked by cybersecurity researchers, targeted European financial institutions with spear-phishing emails impersonating Ukrainian judicial authorities to appear credible. Because financial institutions hold extensive customer and transaction data, compromised endpoints could expose intelligence and create operational risks.

Cybersecurity firms recently disclosed that UAC-0050 tricked recipients into downloading malicious files wrapped in multiple layers of compressed archives to evade security software, then installed the legitimate RMS remote administration tool to control victims’ computers and collect data. Available information does not specify the exact attack dates, the number of affected institutions or the amount of losses.