Skip to content
Auto-CTI
Back to all actors

UNC5792, UNC4221

Unknown Active
Mentions
1
First seen
29 Jun 2026
Last seen
29 Jun 2026

Relevant to you · Relevant

Threat focus:
espionage / apt

Origin

Unattributed

Profile

UNC5792 and UNC4221 are believed to be Russian state-sponsored hacking groups. They have been linked to attacks targeting messaging apps. The US has offered a $10 million bounty for information on these hackers. The attacks continue to evolve.

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC