UNC2630

Actor Type Nation State
Attributed to Nation China
Directly Linked Intrusion Sets KOSTOVITE , VOLTZITE , Insidious Taurus , Volt Typhoon

UNC2630 is an 'uncategorized' intrusion set tracked by cyber threat researchers at Mandiant. The group is reported as conducting espionage activities in support of Chinese government priorities.

In 2021, the group was observed compromising Pulse Secure VPN appliances at scale and deploying webshells.

Cyber Threat Graph Context

Explore how this Intrusion Set relates to the wider threat graph

References