UNC5820

Reported Context (2)

Identified as an aka for the multi-stage intrusion tracked by Unit 42 as CL-STA-0954. PEERSTITCH Malware Uses FortiOS Flaw to Alter Tagged VPN Sessions
The article identifies UNC5820 as another name for Unit 42's tracked cluster CL-STA-0954. FortiManager Intrusion Exposes 500+ Firewalls and Deploys PEERSTITCH Implant

CVE (4)

Malware (1)

People (2)

Threat Actors (1)

MITRE ATT&CK (15)

Vendors (2)

Products (13)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.