UNC5792

Overview 16 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

• 16x.com/TLP_R3D/status/1892221224094445666
• 16cloud.google.com/blog/topics/threat-intelligence/russia-…

Related groups 2

What the sources have in common — not a claim that these are the same actor. See the whole graph.

• Sandworm Team G0034
  2 reports cite both
• UNC4221
  2 reports cite both

Timeline 16 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2026-01-02 or earlier 16 domainthis year

   x.com/TLP_R3D/status/1892221224094445666 · cloud.google.com/blog/topics/threat-intelligence/russia-…

   add-signal-group.com

   add-signal-groups.com

   group-signal.com

   group-signal.tech

   groups-signal.site

   signal-device-off.online

   signal-group-add.com

   signal-group.site

   signal-group.tech

   signal-groups-add.com

   signal-groups.site

   signal-groups.tech

   signal-security.online

   signal-security.site

   signalgroup.site

   signals-group.com

   copy batch

Further reading 2

• x.com/TLP_R3D/status/1892221224094445666
• cloud.google.com/blog/topics/threat-intelligence/russia-…