🇨🇳

UNC2891

APT Group Financial gain Information theft and espionage 3 zero-day CVEs ETDA ✓

Also Known As

No alias recorded

Target Countries 2

Countries highlighted in red

Philippines United States

Sectors Targeted

Finance and Insurance 52 Facilities Support Services 56121 Financial Offices of Lawyers 541110 Space Research and Technology 927 Telecommunications 517 Administrative and Support Services 561 Insurance Carriers and Related Activities 524 Commercial Banking 52211 Health Care and Social Assistance 62

Details

Origin 🇨🇳 CN
Last Updated 13 Apr 2026

MITRE ATT&CK 10

T1016 - System Network Configuration Discovery T1021.004 - SSH T1059.001 T1059.004 - Unix Shell T1070.001 - Clear Windows Event Logs T1071.001 T1078 T1110.001 - Password Guessing T1556.003 - Pluggable Authentication Modules T1572 - Protocol Tunneling

Related Zero-Days 3

CVE-2016-5195 CVE-2024-38193 CVE-2025-49704