UTA0565
Reports
4
First seen
Sep 21, 2026
Last seen
Oct 2, 2026
Motivation
Espionage
Relationships
Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.
Targeting
Sectors
Top ATT&CK techniques
T1190 Exploit Public-Facing Application ×5T1566 Phishing ×4T1068 Exploitation for Privilege Escalation ×2T1105 Ingress Tool Transfer ×2T1071 Application Layer Protocol ×2T1005 Data from Local System ×2T1059 Command and Scripting Interpreter ×2T1041 Exfiltration Over C2 Channel ×1T1056 Input Capture ×1T1505 Server Software Component ×1T1598 Phishing for Information ×1T1055 Process Injection ×1
Indicators
domain ×19cve ×16filename ×2hash_sha256 ×2url ×1hash_md5 ×1hash_sha1 ×1ip_v4 ×1
Indicator values are available on Pro and via the API.
Associated CVEs
Recent reports
High