UNC6691

Primary motivation
financial-gain
Sophistication
intermediate
Resource level
team
Actor type
criminal
Profile updated
2026-07-07 12:25:21

Targeted industries: financial-services

Context

financially motivated threat actor operating from China

Malware & tools used

  • Coruna (infrastructure)

Reports & references

  • cloud.google.com — Coruna Powerful Ios Exploit Kit (report)

External references