← All actors Recent activity

UNC4166

UNC4166 · SPAREPART · STOWAWAY

Indicators
6
Source reports
1
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02

Overview 6 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain4UNC4166-domain.txt
ipv42UNC4166.json

Principal sources 1 reports

Ranked by how many of this actor's indicators each report brought in.

Timeline 6 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 4 domain, 2 ipv44 yrs ago

    mandiant.com/resources/blog/trojanized-windows-insta…

    domain56nk4qmwxcdd72yiaro7bxixvgf5awgmmzpodub7phmfsqylezu2tsid.onion.moe
    domaincdnworld.org
    domainufowdauczwpa4enmzj2yyf7m4cbsjcaxxoyeebc2wdgzwnhvwhjf7iid.onion.moe
    domainufowdauczwpa4enmzj2yyf7m4cbsjcaxxoyeebc2wdgzwnhvwhjf7iid.onion.ws
    ipv4193.142.30.166:443
    ipv491.205.230.66:8443

Further reading 1