UNC5174 Functions as an Initial Access Broker, Exploiting Vulnerabilities

Summary:

UNC5174, a threat actor believed to be associated with China, has been identified exploiting various vulnerabilities and deploying custom tools such as SNOWLIGHT, GOHEAVY, and GOREVERSE for post-exploitation activities. These tools enable UNC5174 to carry out sophisticated cyber operations, potentially aligned to infiltration and espionage operations.

Threat Level – Red | Attack Report