{"id":804,"date":"2025-10-01T08:12:19","date_gmt":"2025-10-01T06:12:19","guid":{"rendered":"https:\/\/familiebuckens.nl\/?p=804"},"modified":"2025-10-03T08:13:16","modified_gmt":"2025-10-03T06:13:16","slug":"ukraine-warns-of-cabinetrat-backdoor-xll-add-ins-spread-via-signal-zips","status":"publish","type":"post","link":"https:\/\/familiebuckens.nl\/index.php\/2025\/10\/01\/ukraine-warns-of-cabinetrat-backdoor-xll-add-ins-spread-via-signal-zips\/","title":{"rendered":"Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of new targeted cyber attacks in the country using a backdoor called CABINETRAT.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The activity,&nbsp;<a href=\"https:\/\/cert.gov.ua\/article\/6285549\" rel=\"noreferrer noopener\" target=\"_blank\">observed<\/a>&nbsp;in September 2025, has been attributed to a threat cluster it tracks as&nbsp;<strong>UAC-0245<\/strong>. The agency said it spotted the attack following the discovery of software tools taking the form of&nbsp;<a href=\"https:\/\/learn.microsoft.com\/en-us\/office\/dev\/add-ins\/excel\/make-custom-functions-compatible-with-xll-udf\" rel=\"noreferrer noopener\" target=\"_blank\">XLL files<\/a>, which refer to Microsoft Excel add-ins that are typically used to extend the functionality of Excel with custom functions.<\/p>\n\n\n<a class=\"wp-block-read-more\" href=\"https:\/\/familiebuckens.nl\/index.php\/2025\/10\/01\/ukraine-warns-of-cabinetrat-backdoor-xll-add-ins-spread-via-signal-zips\/\" target=\"_self\"><a href=\"https:\/\/thehackernews.com\/2025\/10\/ukraine-warns-of-cabinetrat-backdoor.html\">Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs<\/a><span class=\"screen-reader-text\">: Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs<\/span><\/a>","protected":false},"excerpt":{"rendered":"<p>The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of new targeted cyber attacks in the country using a backdoor called CABINETRAT. The activity,&nbsp;observed&nbsp;in September 2025, has been attributed to a threat cluster it tracks as&nbsp;UAC-0245. The agency said it spotted the attack following the discovery of software tools&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[40],"class_list":["post-804","post","type-post","status-publish","format-standard","hentry","category-vulnerability","tag-40"],"_links":{"self":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/804","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/comments?post=804"}],"version-history":[{"count":1,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/804\/revisions"}],"predecessor-version":[{"id":805,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/804\/revisions\/805"}],"wp:attachment":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/media?parent=804"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/categories?post=804"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/tags?post=804"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}