Threat Actor
UNC2165
- First Reported
- Jun 18, 2026
- Latest Reported
- Jun 18, 2026
Reported Context (1)
- Mandiant's moniker for EvilCorp, which the article says obtained initial access almost exclusively from TA569's SocGholish. Operation Endgame Disrupts SocGholish Fake-Update Infrastructure
Malware (16)
People (1)
Threat Actors (6)
Vendors (10)
Products (2)
Tools (2)
Industries (7)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.