← All actors Recent activity

UNC3500

UNC3500

Indicators
8
Source reports
2
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02

Overview 8 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

ipv45UNC3500.json
url2UNC3500.json
domain1UNC3500-domain.txt

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

What the sources have in common — not a claim that these are the same actor. See the whole graph.

Timeline 8 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 1 domain, 5 ipv4, 2 url4 yrs ago

    mandiant.com/resources/mobileiron-log4shell-exploita… · otx.alienvault.com/pulse/6244606893ddbc9a6a5bbdeb

    domainvpn599147072.softether.net
    ipv434.92.40.189:33221
    ipv434.92.40.189:443
    ipv445.76.98.184:33221
    ipv445.76.98.184:443
    ipv445.76.98.184:53
    urlhttp://203.160.86.2
    urlhttp://35.189.145.119

Further reading 2