← All actors Recent activity

UNC4191

UNC4191 · bluehaze · darkdew · mistcloak

Indicators
1
Source reports
4
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02

Overview 1 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain1UNC4191-domain.txt

Principal sources 4 reports

Ranked by how many of this actor's indicators each report brought in.

Timeline 1 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 1 domain4 yrs ago

    mandiant.com/resources/blog/china-nexus-espionage-so… · trendmicro.com/content/dam/trendmicro/global/en/resear… · trendmicro.com/en_us/research/23/c/earth-preta-updated… · otx.alienvault.com/pulse/641ddcfa90e8b1f23b3089e1

    closed.theworkpc.com

Further reading 4