While Volexity largely observed the attacker essentially living off the land, they still deployed a handful of malware files and tools during the cour...

Threat Actor Profile

UTA0178

State-sponsored threat group originating from CN.

Real-Time Alerts

Actor Overview

Origin Country
CN

Suspected Victims

Germany

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on UTA0178 is published.

Actor Details

Primary Name
UTA0178
Known Aliases
UNC5221, Red Dev 61
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →