Threat actor
UNC4841
China
Tracked by CyberSIXT since 9 Sep 2025
- Articles · all time
- 2
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
Names and sources
- UNC4841
- Named by CyberSIXT coverage
- SLIME57
- Named by Malpedia · unc4841
- UNC4841
- Named by Malpedia · unc4841
- SLIME57
- Named by MISP Galaxy · 8959fbb4-95f0-485d-bba2-db9140b95386
- UNC4841
- Named by MISP Galaxy · 8959fbb4-95f0-485d-bba2-db9140b95386
- 8959fbb4-95f0-485d-bba2-db9140b95386
- Named by CyberSIXT coverage
Attributed facts
- origin
- China (MISP Galaxy · 8959fbb4-95f0-485d-bba2-db9140b95386)
- Chinese Hackers Salt Typhoon and UNC4841 Team Up to Breach Critical InfrastructureGBHackers
- Unmasking Salt Typhoon: A Report Exposes 45 New Domains from a Chinese APT GroupSecurityOnline
- 45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber EspionageThe Hacker News · first in our coverage