Security Resilience

Threat actor · all actors

Ukrainian Cyber AllianceHACK-UCA hacktivist

🇺🇦 UA

aka Ukrainian Cyber Alliance, UCA, UkrCyberAlliance, RUH8, Cyberhunta, FalconsFlame

Last updated: 2026-10-14

0attributed CVEs
0ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active

About this actor

A 2016-founded coalition of Ukrainian volunteer hacktivist crews (RUH8, Cyberhunta, FalconsFlame, Trinity) that conducted multiple high-profile pre-IT-Army operations against Russian state assets, including the 2016 SurkovLeaks dump and a 2022 Roskomnadzor breach. Operationally and ideologically a precursor to the IT Army of Ukraine.

How we know this

Data origin
Curated overlay Hacktivist entry synthesised from public reporting — not a MITRE-tracked intrusion set.
Techniques
No ATT&CK techniques mapped.
Named victims
1 extracted from reporting · 1 from the curated floor.

Thin data: No ATT&CK techniques are mapped yet — the behavioural profile is empty.

See how actor data is built for the full pipeline.

Activity timeline

No activity events recorded.

Profile

CVERiskCVSSEPSSPublishedProducts
No attributed CVEs.

No techniques attributed.

Co-occurring actors

None.

Similar actors

Same nation-state