Mandiant created UNC5266 to track post-disclosure exploitation leading to deployment of Bishop Fox's SLIVER implant framework, a WARPWIRE variant, and...
Actor Overview
Related Threat Reports
PremiumAPT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated
Get alerts when new intel on UNC5266 is published.
Actor Details
Primary Name
UNC5266
Data Source
Precursor Intelligence