MaaS operation using Emmenhtal and Amadey linked to threats against Ukrainian entities

A sophisticated Malware-as-a-Service (MaaS) operation has been identified leveraging the Emmenhtal loader and Amadey malware to distribute a variety of payloads. The campaign targets Ukrainian entities and utilizes public GitHub repositories.