Skip to content
Auto-CTI
Back to all actors

UNC5221

Nation-state Espionage Dormant
Mentions
1
First seen
05 Jun 2026
Last seen
05 Jun 2026

Relevant to you ยท Relevant

Threat focus:
espionage / apt

Origin

Unattributed

Sources

inferred Confidence high

Profile

UNC5221 is a Chinese advanced persistent threat (APT) group recently observed deploying new malware to maintain access to compromised networks. This backdoor malware allows the actor to remain persistent within infiltrated environments and continue unauthorized activities. No specific target sectors or regions are mentioned in the available headlines.

Affected vendors

Microsoft

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC

โ€ฆ