UAT-5918 is an advanced persistent threat (APT) group that emerged in at least 2023, primarily motivated by establishing long-term access for information theft and credential harvesting from target networks. Assessed with high confidence to be of Chinese origin, the group's tactics, techniques, and procedures (TTPs) exhibit substantial overlap with several Chinese APT groups, including Volt Typhoon, Flax Typhoon, Dalbit, Tropic Trooper, and Earth Estries. While sharing similarities with these groups, UAT-5918 distinguishes itself by employing a unique subset of tools such as LaZagne, SNetCracker, and PortBrute that have not been broadly associated with other threat actors in public reporting.

Aliases del actor

uat-5918uat-7237

Actores similares

UAT-7237apt · 0apt-equationgroupactor · 1Equationactor · 1Aquatic Pandaactor · 1aquatic-pandaactor · 1equation-groupactor · 1UAT-5394apt · 0UAT-8099apt · 0Equation Groupapt · 0UAT-9244apt · 0