Description
Graphsteel is a backdoor written in Go that researchers observed during cyberattacks on Ukrainian state organizations, attributed to the UAC-0056 threat actor group.
Stats
- First seen
- April 2022
- Last seen
- September 2026
Also known as
GraphSteel
Alert name variants
| Alert Name |
|---|
| Win64.Backdoor.Graphsteel |
| Win64.Backdoor.GraphSteel |
| Win64.Trojan.GraphSteel |
Related IPS Signatures
| Signature Name |
|---|
| MALWARE-CNC Win.Trojan.GraphSteel outbound connection |