Threat Actor
CL-STA-0954
- First Reported
- Oct 14, 2026
- Latest Reported
- Oct 16, 2026
Reported Context (2)
- Unit 42 tracking name for the multi-stage intrusion; the article identifies UNC5820 as an aka. PEERSTITCH Malware Uses FortiOS Flaw to Alter Tagged VPN Sessions
- Unit 42's tracking designation for the cluster behind the intrusion; the article states it is also known as UNC5820. FortiManager Intrusion Exposes 500+ Firewalls and Deploys PEERSTITCH Implant
CVE (4)
Malware (1)
People (2)
Threat Actors (1)
MITRE ATT&CK (15)
Vendors (2)
Products (13)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.