CERT-UA has identified an active intrusion campaign by threat cluster UAC-0247 deploying novel malware called AgingFly against Ukrainian government agencies, hospitals, and defense-affiliated organizations. The malware compiles its own attack code at runtime, making it largely invisible to traditional antivirus and signature-based security tools. Organizations supporting Ukrainian critical infrastructure or sharing networks with Ukrainian entities face elevated risk of credential theft, lateral movement, and sustained access by a persistent adversary.