UTA0576
Reports
3
First seen
Oct 13, 2026
Last seen
Oct 14, 2026
Motivation
Espionage
Relationships
Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.
Top ATT&CK techniques
T1041 Exfiltration Over C2 Channel ×3T1003 OS Credential Dumping ×3T1068 Exploitation for Privilege Escalation ×2T1087 Account Discovery ×2T1070 Indicator Removal ×2T1018 Remote System Discovery ×2T1190 Exploit Public-Facing Application ×2T1078 Valid Accounts ×2T1110 Brute Force ×1T1005 Data from Local System ×1T1040 Network Sniffing ×1T1059 Command and Scripting Interpreter ×1
Indicators
cve ×8domain ×4ip_v4 ×4
Indicator values are available on Pro and via the API.