Threat actor
CL-UNK-1211
Tracked by CyberSIXT since 9 Mar
- Articlesall time
- 3
- Articleslast 30 days
- 2
- CVEs exploitedattributed · all time
- 2
- Research reportsall time
- 0
) : ""}
Names and sources
- CL-UNK-1068
- CyberSIXT coverage
- CL-UNK-1211
- CyberSIXT coverage
CVEs exploited
2 CVEs an article attributes to CL-UNK-1211CVE-2021-4034Red Hat Polkit Out-of-Bounds Read and Write Vulnerability · attributed by Unit 42, 15 Oct · Source articleCVSSUnratedExploited95%EPSS1article
CVE-2025-55182Meta React Server Components Remote Code Execution Vulnerability · attributed by Unit 42, 15 Oct · Source articleCVSS10.0CriticalExploited99.8%EPSS5articles
Vendors targeted
MITRE ATT&CK® techniques
No MITRE ATT&CK® techniques are recorded for CL-UNK-1211.
- Hackers targeted government Linux servers to steal passwords and hijack official accountsSecurityOnline
- AI-Enabled Espionage Campaign Targets Government Linux SystemsUnit 42
- China linked group CL UNK 1068 targets Asia in cyber espionageThe Hacker News · first in our coverage