Novel Starland RAT and bespoke WLDR C2 implant deployed in financially motivated campaign

Reported 16 Jul 2026 by otx · Severity: medium

A sophisticated Russian-speaking financially motivated adversary designated UAT-11795 has been conducting malicious operations targeting users in the United States and Europe since June 2025. The campaign delivers a Python-based remote access tool called Starland RAT and a PowerS