Reporting regarding activity related to the SolarWinds supply chain injection has grown quickly since initial disclosure on 13 December 2020. A signif...

Threat Actor Profile

UNC2452

State-sponsored threat group originating from RU.

Real-Time Alerts

Actor Overview

Origin Country
RU

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on UNC2452 is published.

Actor Details

Primary Name
UNC2452
Known Aliases
DarkHalo, StellarParticle, NOBELIUM, Solar Phoenix, Midnight Blizzard
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →