Threat Actor
UAT-8616
- First Reported
- Oct 29, 2026
- Latest Reported
- Oct 29, 2026
Reported Context (2)
- Talos tracked exploitation of CVE-2026-20127 as UAT-8616, a cluster of activity it said went back to at least 2023. The article does not establish how this cluster relates to UAT-11473. Cisco SD-WAN Flaw Exploited to Deploy Malware Designed to Steal Traffic Encryption Keys
- Reportedly exploited CVE-2026-20127 as a zero-day since at least 2023. Cisco SD-WAN Flaw Exploited to Deploy KeyDrift Malware
CVE (1)
Malware (4)
Threat Actors (2)
MITRE ATT&CK (6)
Vendors (1)
Products (2)
Tools (2)
Industries (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.