Threat actor
UAT-9686
China
Tracked by CyberSIXT since 18 Dec 2025
- Articles · all time
- 3
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
Three articles so far, 18 Dec 2025 to 16 Jan.
- Cisco Zero-Day Siege: Chinese Group UAT-9686 Deploys ‘Aqua’ Malware via CVSS 10 Root ExploitSecurityOnline
- China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web ManagerSecurity Affairs
- China-linked APT UAT-9686 abused now patched maximum severity AsyncOS bugSecurity Affairs
Names and sources
- UAT-9686
- Named by CyberSIXT coverage
- UAT-9686
- Named by Malpedia · uat-9686
- UAT-9686
- Named by MISP Galaxy · 72075688-b6e6-4324-849a-77041a54bc09
- 72075688-b6e6-4324-849a-77041a54bc09
- Named by CyberSIXT coverage
Attributed facts
- origin
- China (MISP Galaxy · 72075688-b6e6-4324-849a-77041a54bc09)
- China-linked APT UAT-9686 abused now patched maximum severity AsyncOS bugSecurity Affairs
- China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web ManagerSecurity Affairs
- Cisco Zero-Day Siege: Chinese Group UAT-9686 Deploys ‘Aqua’ Malware via CVSS 10 Root ExploitSecurityOnline · first in our coverage