UNC4393 is a financially motivated threat actor primarily using BASTA ransomware. They have been active since early 2022 and have targeted over 40 org...
Actor Overview
Related Threat Reports
PremiumAPT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated
Get alerts when new intel on UNC4393 is published.
Actor Details
Primary Name
UNC4393
Known Aliases
Storm-1811, CURLY SPIDER, STAC5777, Cardinal
Data Source
Precursor Intelligence