2025-04-24
Mandiant
M-Trends 2025: Data, Insights, and Recommendations From the Frontlines
#ITWorker
#Trend
#UNC1069
#UNC3782
#UNC4736
#UNC4899
#UNC5342
UNC4736
"UNC4736, a sophisticated North Korean threat actor, conducted a cascading software supply chain attack in 2022, compromising a trading software entity and subsequently causing a second supply chain compromise that affected at least nine other organizations. This group has relied on trojanized trading and cryptocurrency software to gain network access for financial gain. UNC4736 also targeted decentralized finance platforms in 2024."
- Mandiant, https://cloud.google.com/blog/topics/threat-intelligence/m-trends-2025/?hl=en
Also known as
| Name | Named by | AKA | First seen | Last seen |
|---|---|---|---|---|
| CitrineSleet | Microsoft | Lazarus | 2023-10-06 | 2025-03-27 |
| GleamingPisces | PaloaltoNetworks | CitrineSleet | 2024-09-09 | 2024-09-18 |
| UNC4736 | Mandiant | CitrineSleet | 2023-04-11 | 2025-04-24 |
| UTA0040 | Volexity | UNC4736 | 2023-03-30 | 2023-03-30 |