Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
espionageThreat Actor
Active Threat
UNC1069
52
IOCs Tracked
3
Intel Reports
Associated IOCs50 total
IP2
23.254.164.92
2026-07-18High23.254.164.1232026-07-18HighURL3
https://maskasd.com/85555750392026-06-20High
https://teams.onweblive.org/api/update/8555575039/42026-06-20High
https://23.254.164.92:8000/update/498908782026-06-20Medium
SHA2566
50eae63d3e24be9ca8803f4b5a0408aef97ee3fab7af018d8c2dde7c359edd652026-06-20Medium
1d1bf5e8c1539d2f05b1429235b8f4990f87036774be95157b315a7803dd55262026-06-20Medium
221c45a790dec2a296af57969e1165a16f8f49733aeab64c0bbd768d9943badf2026-06-20Medium
b122a9873bedf145ae2a7fd024b5f309007dbb025149f4dc4ac3f7e4f32a36a42026-06-20Medium
4a8860240e4231c3a74c81949be655a28e096a7d72f38fbe84e5b37636b984172026-06-20Medium
b73de25c053c3225a077738a1fcbd9ca6966d7b3cd6f5494a30f0aa0eae55c7e2026-06-20Medium
CVE36
CVE-2026-660662026-08-07High
CVE-2026-203162026-07-31High
CVE-2025-535212026-06-03High
CVE-2026-157182026-07-31Medium
CVE-2025-545052026-08-21Medium
CVE-2026-437762026-08-21Medium
CVE-2025-545182026-08-21Medium
CVE-2026-157192026-07-31Medium
CVE-2026-551292026-07-31Medium
CVE-2025-686862026-07-31Medium
CVE-2026-614872026-07-31Medium
CVE-2026-648132026-07-31Medium
CVE-2026-598782026-07-31Medium
CVE-2026-624322026-07-31Medium
CVE-2026-533542026-07-31Medium
CVE-2026-624352026-07-31Medium
CVE-2026-647182026-07-31Medium
CVE-2026-438212026-07-31Medium
CVE-2026-647832026-07-31Medium
CVE-2026-624312026-07-31Medium
CVE-2026-167232026-07-31Medium
CVE-2026-645202026-07-31Medium
CVE-2026-438042026-07-31Medium
CVE-2026-624362026-07-31Medium
CVE-2023-458962026-07-31Medium
CVE-2026-659072026-07-31Medium
CVE-2026-659062026-07-31Medium
CVE-2026-647572026-07-31Medium
CVE-2026-624282026-07-31Medium
CVE-2026-424922026-07-31Medium
CVE-2026-648042026-07-31Medium
CVE-2026-648052026-07-31Medium
CVE-2026-624342026-07-31Medium
CVE-2026-647192026-07-31Medium
CVE-2026-648142026-07-31Medium
CVE-2026-659082026-07-31Medium
Email2
[email protected]2026-06-20High
[email protected]2026-06-20High
Related Reports3 total
Threat Profile
Motivationespionage
Last seenJul 2026
IOCs tracked52