CyberSIXT Search
Threat actor

UNC6384

China

Tracked by CyberSIXT since 31 Oct 2025

Articles · all time
1
Articles · last 30 days
0
CVEs exploited · attributed · all time
0
Research reports · all time
0

One article so far, 31 Oct 2025. A pattern appears once more outlets cover UNC6384.

1
  1. Windows LNK UI Spoofing Vulnerability Weaponized for Remote Code ExecutionGBHackers

Names and sources

UNC6384
Named by CyberSIXT coverage
UNC6384
Named by Malpedia · unc6384
Vertigo Panda
Named by Malpedia · unc6384
UNC6384
Named by MISP Galaxy · a3e4a57e-4b50-4bca-9282-3307e92e5539
Vertigo Panda
Named by MISP Galaxy · a3e4a57e-4b50-4bca-9282-3307e92e5539
a3e4a57e-4b50-4bca-9282-3307e92e5539
Named by CyberSIXT coverage

Attributed facts

origin
China (MISP Galaxy · a3e4a57e-4b50-4bca-9282-3307e92e5539)

Coverage

1 article, all timeRSS feed
  1. Windows LNK UI Spoofing Vulnerability Weaponized for Remote Code ExecutionGBHackers · first in our coverage

Learn more

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device