UNC3569

Reported Context (2)

Reportedly exploited CVE-2026-51990 and deployed the GRAYRABBIT backdoor. Recorded Future Reports 94 High-Impact Vulnerabilities in September 2026, Including 80 Actively Exploited
The article attributes the observed intrusion and deployment of GRAYRABBIT to UNC3569. Sogou Input Method Flaw Let UNC3569 Deliver GRAYRABBIT Backdoor with a Single Click

CVE (77)

Malware (7)

Threat Actors (7)

MITRE ATT&CK (15)

Vendors (12)

Products (69)

Tools (7)

Industries (5)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.