UAC-0226 GIFTEDCROOK Ukrainian Military Lure Document Creation and Staging

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•1

Detects file creation events associated with the UAC-0226 campaign, specifically targeting Ukrainian military-themed lures and staging artifacts related to the GIFTEDCROOK malware. This rule monitors for the presence of specific file paths and naming conventions indicative of ongoing espionage operations.