UNC5221
Nation-state Espionage Active
- Mentions
- 2
- First seen
- 05 Jun 2026
- Last seen
- 16 Oct 2026
Relevant to you ยท Relevant
- Threat focus:
- espionage / apt
Origin
Unattributed
Sources
inferred Confidence high
Profile
UNC5221 is a prolific Chinese espionage group. The group exploited a zero-day vulnerability in BeyondTrust. It also deployed new malware to maintain access to compromised networks. These activities indicate ongoing espionage operations.
Affected vendors
MicrosoftBeyondTrust