An uncategorized (UNC) threat group is a cluster of cyber intrusion activity which includes observable artifacts such as adversary infrastructure, tools, and attack patterns, but is not yet classified as an advanced persistent threat (APT) or financially motivated (FIN) group. As more artifacts and analysis are collected on these UNC groups, Mandiant Threat Intelligence may merge these activity sets with other UNC groups or reclassify them during the graduation process as a temporary (TEMP), APT or FIN group. Learn How Mandiant Tracks UNCs

In this podcast we chat about the threat landscape in the Asia-Pacific region.

We observed attackers leveraging the latest code execution and persistence techniques to distribute malicious macro-based documents to individuals in Asia and the Middle East.

Finite resources and the continual urgency to prioritize alerts and make effective decisions puts many security teams under increasing pressure. One wrong decision at a strategic or operational level can impact the business with costly consequences.

Two Chinese Advanced Persistent Threat (APT) groups quickly adapted their approach after details came to light about a zero-day vulnerability.

On this podcast we discuss a requirements driven approach to cyber threat intelligence.

On this podcast we speak about the Google Cloud Threat Horizons Report.

Automated Defense, Data can be forwarded in JSON format.