- Category
- State · Attributed to a state or working for one.
- Origin
- China(high confidence)
- Sources
- 5 sources carry it
- Identifier
- GINC-APT-0471 · unc4841
What it is
UNC4841 is a well-resourced threat actor that has utilized a wide range of malware and purpose-built tooling to enable their global espionage operations. They have been observed selectively deploying specific malware families at high priority targets, with SKIPJACK being the most widely deployed. UNC4841 primarily targeted government and technology organizations, but they have also been observed targeting other verticals.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Other names
- SLIME57
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de