Signalis
sign in--:--:--UTC
Threat actors

UNK_QuietRacket

☆ pin
Reports
4
First seen
Sep 9, 2026
Last seen
Sep 9, 2026
Motivation
Espionage

Relationships

CVE-2026-85046, in 3 of UNK_QuietRacket's reports, exploited in the wild×3CVE-2026-85046CVE-2026-85880, in 3 of UNK_QuietRacket's reports, exploited in the wild×3CVE-2026-85880CVE-2026-87491, in 2 of UNK_QuietRacket's reports, exploited in the wild×2CVE-2026-87491Co-mentioned with UNK_QuietRacket in 4 Signalis reports (co-mention, not confirmed collaboration)×4unkdoublech…Co-mentioned with UNK_QuietRacket in 4 Signalis reports (co-mention, not confirmed collaboration)×4unklatenightCo-mentioned with UNK_QuietRacket in 3 Signalis reports (co-mention, not confirmed collaboration)×3apt31Reports targeting OtherOtherReports targeting DefenseDefenseUNK_QuietRacket

Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.

Targeting

Sectors
Other ×2Defense ×1
Victim regions
United States ×1

Top ATT&CK techniques

T1190 Exploit Public-Facing Application ×4T1566 Phishing ×4T1055 Process Injection ×3T1176 Browser Extensions ×3T1068 Exploitation for Privilege Escalation ×3T1555 Credentials from Password Stores ×3T1185 Man in the Browser ×2T1105 Ingress Tool Transfer ×2T1071 Application Layer Protocol ×2T1543 Create or Modify System Process ×1T1059.001 Command and Scripting Interpreter: PowerShell ×1T1553.006 Modify Authentication Process: Web Session Cookie ×1

Indicators

cve ×8filename ×5registry_key ×1

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2026-85046 (exploited)CVE-2026-85880 (exploited)CVE-2026-87491 (exploited)

Recent reports

Critical

Chinese espionage groups exploit zero-day chain targeting browsers and Windows

CyberScoopCritical

Chinese espionage groups exploit BlueMoon zero-day chain targeting browsers and Windows

Proofpoint Threat InsightCritical

BlueMoon Exploit Kit Chains Chrome and Windows Flaws, Deployed by Four Espionage Groups Within Days

The Hacker NewsHigh

Multiple Chinese hacking groups exploit identical Chrome zero-day vulnerability

The Record (Recorded Future News)

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans