Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
espionageThreat Actor
Active Threat
UNC6201
22
IOCs Tracked
1
Intel Reports
Associated IOCs22 total
IP4
95.179.213.045.76.155.20245.32.144.25545.77.31.210Domain3
temp.sh2026-10-09High
safe-dns.it.com2026-06-03High
cdncheck.it.com2026-06-03High
SHA2561
4d4aec6120290e21778c1b14c94aa6ebff3b0816fb6798495dc2eae165db45662026-08-10High
CVE14
CVE-2026-201272026-10-09High
CVE-2026-17312026-10-20High
CVE-2026-215102026-10-15Medium
CVE-2026-24412026-09-05Medium
CVE-2026-215132026-08-13Medium
CVE-2026-215332026-06-03Medium
CVE-2026-251082026-06-03Medium
CVE-2026-215192026-06-03Medium
CVE-2026-227692026-06-03Medium
CVE-2022-207752026-06-03Medium
CVE-2026-215142026-06-03Medium
CVE-2026-207002026-06-03Medium
CVE-2025-155562026-06-03Medium
CVE-2026-215252026-06-03Medium
Threat Profile
Motivationespionage
Last seenJun 2026
IOCs tracked22