Threat actor
UNC5342
Tracked by CyberSIXT since 20 Oct 2025
- Articles · all time
- 1
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
Names and sources
- UNC5342
- Named by CyberSIXT coverage
- 6c253a07-b75d-4c3c-a93d-13aed83662f1
- Named by CyberSIXT coverage
- North Korean PurpleBravo Campaign Targeted 3,136 IP Addresses via Fake Job InterviewsThe Hacker News
- North Korea’s UNC5342 APT Uses EtherHiding to Store Malware in Blockchain Smart Contracts for Stealthy C2SecurityOnline · first in our coverage