UNC4393 is a financially motivated threat actor primarily using BASTA ransomware. They have been active since early 2022 and have targeted over 40 org...

Threat Actor Profile

UNC4393

Real-Time Alerts

Actor Overview

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on UNC4393 is published.

Actor Details

Primary Name
UNC4393
Known Aliases
Storm-1811, CURLY SPIDER, STAC5777, Cardinal
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →