Skip to content
Auto-CTI
Back to all actors

UNC5221

Nation-state Espionage Active
Mentions
2
First seen
05 Jun 2026
Last seen
16 Oct 2026

Relevant to you ยท Relevant

Threat focus:
espionage / apt

Origin

Unattributed

Sources

inferred Confidence high

Profile

UNC5221 is a prolific Chinese espionage group. The group exploited a zero-day vulnerability in BeyondTrust. It also deployed new malware to maintain access to compromised networks. These activities indicate ongoing espionage operations.

Affected vendors

MicrosoftBeyondTrust

Activity (8 weeks)

39
40
41
42
43
44
45
46

Recent activity

ESC

โ€ฆ