Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
Threat Actors
Malware Families
Excerpt
This research was conducted jointly with Julian-Ferdinand Vögele of Recorded Future’s Insikt Group. Details of the joint research and presentation are available here . Cisco Talos identified UAT-6275 ( TAG-193 by Recorded Future) activity targeting government organizations across the Commonwealth of Independent States (CIS). Recovered artifacts show additional interest in water resources and energy. This focus is consistent with intelligence collection and may…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-25257 | Medium | Score 51/100 | First seen |
| CVE | CVE-2025-8088 | High | Score 72/100 | First seen |
IOC Relationship Graph
Building graph…