UNC3569

China-nexus espionage actor that has been observed exploiting vulnerabilities in Aspera Faspex, Microsoft Exchange, and Oracle Web Applications Desktop Integrator, among others, to gain initial access to target environments.

Recent activity

No posts or advisories have named this actor recently.

References

• https://cloud.google.com/blog/topics/threat-intelligence/ivanti-post-exploitation-lateral-movement

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.