G1048 UNC3886
Enterprisealso known asUNC3886
UNC3886 is a China-nexus cyberespionage group that has been active since at least 2022, targeting defense, technology, and telecommunication organizations located in the United States and the Asia-Pacific-Japan (APJ) regions. UNC3886 has displayed a deep understanding of edge devices and virtualization technologies through the exploitation of zero-day vulnerabilities and the use of novel malware families and utilities.
01
canonical actor
The group this is attributed to.
02
techniques used (49)
ATT&CK techniques this enables or maps to.
showing 20 of 49
03
software used (8)
Malware and tools associated with this.
04
campaigns (1)
Campaigns that use this.
05
source
Where this definition is published.