Threat Actor
CL-UNK-1068
- First Reported
- Mar 6, 2026
- Latest Reported
- Mar 6, 2026
Reported Context (1)
- Unit 42 tracks this cluster for intrusions since at least 2020 involving web shells, credential theft, tunneling, and data exfiltration. Unit 42 assesses with high confidence that the activity is by a Chinese-communicating threat actor, while noting that the actor's affiliation and possible cybercriminal motivation are not fully determined. Unit 42 Tracks CL-UNK-1068 Operations Targeting Asian Critical Sectors
CVE (2)
Malware (3)
MITRE ATT&CK (15)
Vendors (3)
Products (5)
Tools (12)
Industries (7)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.