Skip to content
Auto-CTI
Back to all actors

UNC5792, UNC4221

Unknown Dormant
Mentions
1
First seen
29 Jun 2026
Last seen
29 Jun 2026

Relevant to you · Relevant

Threat focus:
espionage / apt

Origin

Unattributed

Profile

UNC5792 and UNC4221 are believed to be Russian state-sponsored hacking groups. They have been linked to attacks targeting messaging apps. The US has offered a $10 million bounty for information on these hackers. The attacks continue to evolve.

Activity (8 weeks)

39
40
41
42
43
44
45
46

Recent activity

ESC

…