Threat actor

UNC4899

In 2 briefs, most recently 10 March 2026. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. Ericsson US data breach via service provider, UNC4899 crypto firm theft, and Salesforce Experience Cloud data exposure by ShinyHunters.
  2. North Korea-linked UNC4899 crypto theft, UNC2891 ATM network breaches, and patched Honeywell Experion PKS industrial control flaws.