While Volexity largely observed the attacker essentially living off the land, they still deployed a handful of malware files and tools during the cour...
Actor Overview
Origin Country
CN
Suspected Victims
Germany
Related Threat Reports
PremiumAPT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated
Get alerts when new intel on UTA0178 is published.
Actor Details
Primary Name
UTA0178
Known Aliases
UNC5221, Red Dev 61
Data Source
Precursor Intelligence