UNC4990

Overview 25 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 1 reports

Ranked by how many of this actor's indicators each report brought in.

• 25mandiant.com/resources/blog/unc4990-evolution-usb-ma…

Timeline 25 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2024-02-03 14 domain, 6 url, 3 url_path2 yrs ago

   mandiant.com/resources/blog/unc4990-evolution-usb-ma…

   domain	apiworld.cf
   domain	bobsmith.apiworld.cf
   domain	captcha.grouphelp.top
   domain	captcha.tgbot.it
   domain	davebeerblog.eu.org
   domain	eu1.microtunnel.it
   domain	euserv3.herokuapp.com
   domain	geraldonsboutique.altervista.org
   domain	lucaespo.altervista.org
   domain	lucaesposito.herokuapp.com
   domain	microtunnel.it
   domain	monumental.ga
   domain	ncnskjhrbefwifjhww.tk
   domain	studiofotografico35mm.altervista.org
   url	arstechnica.com/civis/members/frncbf22.1062014/about/
   url	eldi8.github.io/src.txt
   url	evh001.gitlab.io/src.txt
   url	luke.compeyson.eu.org/runservice/api/public.php
   url	luke.compeyson.eu.org/runservice/api/public_result.php
   url	luke.compeyson.eu.org/wp-admin.php
   url_path	/c0s1ta/
   url_path	/c0s1ta/index.php
   url_path	/updater.php?from=USB1

   copy batch

2. 2023-08-23 1 domain3 yrs ago

   mandiant.com/resources/blog/unc4990-evolution-usb-ma…

   evinfeoptasw.dedyn.io

   copy batch

3. 2023-03-20 1 domain3 yrs ago

   mandiant.com/resources/blog/unc4990-evolution-usb-ma…

   wjecpujpanmwm.tk

   copy batch

Further reading 1

• mandiant.com/resources/blog/unc4990-evolution-usb-ma…