SYMBOLCOMMON_NAMEaka. SYNONYMS

UAT-10362  (Back to overview)


UAT-10362 is a threat actor identified by Cisco Talos, conducting spear-phishing campaigns targeting Taiwanese NGOs and suspected universities to deploy the malware "LucidRook." The malware features a multi-language modular design, layered anti-analysis capabilities, and stealth-focused payload handling. UAT-10362's operations rely on compromised or public infrastructure, indicating a mature level of operational tradecraft.


Associated Families

There are currently no families associated with this actor.


References
2026-04-07Talos IntelligenceAshley Shen
New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations
LucidKnight LucidPawn LucidRook UAT-10362

Credits: MISP Project