- Category
- Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
- Origin
- Unknown
- Seen
- to 2026
- Status
- Active
- ATT&CK
- G1029 · 1 techniques
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1225 · unc788
What it is
UNC788 is a group of hackers from Iran that has targeted people in the Middle East.
Tools
The tools and malware families the sources tie to it.
- HilalRAT
Sources
- MITRE ATT&CK attack.mitre.org