Living Off The Land on a Private Island: An Overview of UNC1945

Title: Living Off The Land on a Private Island: An Overview of UNC1945

Presenters: Mandiant Threat Experts

Date: On-Demand

Abstract:

Through Mandiant investigation of intrusions between February 2018 through September 2020, the FLARE Advanced Practices Team observed a group Mandiant tracks as “UNC1945” compromise and operate against a tailored set of targets within the financial and professional consulting industries by leveraging access to third-party networks.

Please join Mandiant’s Justin Moore and Jacob Thompson, for a look at UNC1945, including the group’s:

• Demonstrated access to exploits, tools, and malware for multiple operating systems
• Exploitation of an Oracle Zero-day
• Disciplined interest in covering or manipulating their activity
• Advanced technical abilities during interactive operations