MITRE ATT&CKgroup

G1048 UNC3886

Published 2025-05-29 Modified 2026-07-31 Official page ↗
Domain
enterprise
Version
1.0
Created
2025-05-29

Description

UNC3886 is a China-nexus cyberespionage group that has been active since at least 2022, targeting defense, technology, and telecommunication organizations located in the United States and the Asia-Pacific-Japan (APJ) regions. UNC3886 has displayed a deep understanding of edge devices and virtualization technologies through the exploitation of zero-day vulnerabilities and the use of novel malware families and utilities.

Related

Uses · MITRE ATT&CK (57)

  • T1685 Disable or Modify Tools technique
  • T1686 Disable or Modify System Firewall technique
  • T1690 Prevent Command History Logging technique
  • T1681 Search Threat Vendor Data technique
  • S1223 THINCRUST software (malware)
  • S1224 CASTLETAP software (malware)
  • S1222 RIFLESPINE software (malware)
  • S1221 MOPSLED software (malware)
  • S1219 REPTILE software (malware)
  • S1220 MEDUSA software (malware)
  • S1218 VIRTUALPIE software (malware)
  • S1217 VIRTUALPITA software (malware)
  • T1675 ESXi Administration Command technique
  • T1505.006 vSphere Installation Bundles sub-technique
  • T1673 Virtual Machine Discovery technique
  • T1059.012 Hypervisor CLI sub-technique
  • T1564.011 Ignore Process Interrupts sub-technique
  • T1070.007 Clear Network Connection History and Configurations sub-technique
  • T1555.005 Password Managers sub-technique
  • T1587.001 Malware sub-technique
  • T1587.004 Exploits sub-technique
  • T1588.001 Malware sub-technique
  • T1588.004 Digital Certificates sub-technique
  • T1205.001 Port Knocking sub-technique
  • T1027.005 Indicator Removal from Tools sub-technique
  • T1074.001 Local Data Staging sub-technique
  • T1078.001 Default Accounts sub-technique
  • T1570 Lateral Tool Transfer technique
  • T1059.001 PowerShell sub-technique
  • T1059.003 Windows Command Shell sub-technique
Show all 57 ›

Referenced by MITRE ATT&CK · attributed to (1)

  • C0056 RedPenguin campaign

References