GINC-APT-0471 · State

UNC4841

Also SLIME57.

Category
State · Attributed to a state or working for one.
Origin
China(high confidence)
Sources
5 sources carry it
Identifier
GINC-APT-0471 · unc4841

What it is

UNC4841 is a well-resourced threat actor that has utilized a wide range of malware and purpose-built tooling to enable their global espionage operations. They have been observed selectively deploying specific malware families at high priority targets, with SKIPJACK being the most widely deployed. UNC4841 primarily targeted government and technology organizations, but they have also been observed targeting other verticals.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
SLIME57

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de