UNC1130

2022-08-18 • Mandiant • Detecting Embedded Content in OOXML Documents

Related Actors

Related Reports in This Cluster

Top Authors

View UNC1130 reports only

2026-06-17
Ahnlab
#Kimsuky #LNK #T1059.001 #T1053.005 #T1105 #T1204.002
2026-06-16
Ahnlab
#Trend #Lazarus #FamousChollima #Kimsuky #TA-RedAnt
2026-06-16
Ahnlab
#Lazarus #FamousChollima #Kimsuky #TA-RedAnt #Trend
2026-06-12
i QBlack
#Kimsuky #Lazarus #Suspicious
2026-06-09
ESTSecurity
#Kimsuky #Phishing #LNK #T1566.001 #T1204.002 #T1059.001 #T1053.005 #T1547.001 #T1102 #T1071.001 #T1027 #T1140 #T1497
2026-06-01
Idanmalihi
#Kimsuky
2026-05-27
ENKI
#HttpSpy #JSONPing #Kimsuky #T1566 #T1059.007 #T1204.002 #T1547.001 #T1053.005 #T1027.009 #T1027.010 #T1027.013 #T1140 #T1620 #T1497.001 #T1055.001 #T1071.001 #T1132.001 #T1573.001 #T1113 #T1041 #T1636.004
2026-05-27
ENKI
#Kimsuky #JSONPing #HttpSpy #T1566 #T1059.003 #T1059.007 #T1204.002 #T1547.001 #T1053.005 #T1027 #T1140 #T1620 #T1497.001 #T1055.001 #T1070.004 #T1070.006 #T1071.001 #T1132.001 #T1573.001 #T1090 #T1636.004 #T1027.013
2026-05-27
Ahnlab
#Kimsuky #Phishing #LNK #MeshAgent #T1566.001 #T1204.002 #T1059.001 #T1218.005 #T1105 #T1027 #T1140 #T1056.001 #T1115 #T1055 #T1497.003
2026-05-15
Logpresso
#Kimsuky #LNK #GitHub #VSCode #Phishing
2026-05-14
Kaspersky
#Kimsuky #APT43 #RubySleet #BlackBanshee #SparklingPisces #VelvetChollima #Springtail #PebbleDash #AppleSeed #HappyDoor #HttpTroy #VSCode #GitHub #Phishing #JSE #ADS #T1566.001 #T1059.001 #T1059.003 #T1105 #T1053.005 #T1547.001 #T1543.003 #T1219 #T1027 #T1005 #T1113 #T1056.001 #T1041 #T1071.001
2026-05-14
Hybrid Analysis
#VelvetChollima #MoonPeak #XenoRAT #Phishing #T1053.005 #T1056.001 #T1555.003 #T1105 #T1567.002
2026-05-13
Qihoo360
#APT-C-55 #AsyncRAT #LNK
2026-04-28
Cyfirma
#APT37 #Kimsuky #Lazarus #Trend
#Kimsuky

View UNC1130 reports only