UNC4736
Suspected sponsor: North Korea0
APAC targets
0
Techniques
0
Incidents
0
News · 30d
Profile
UNC4736 is a North Korean threat actor that has been involved in supply chain attacks targeting software chains of 3CX and X_TRADER. They have used malware strains such as TAXHAUL, Coldcat, and VEILEDSIGNAL to compromise Windows and macOS systems. UNC4736 has been linked to financially motivated cybercrime operations, particularly focused on cryptocurrency and fintech-related services. They have also demonstrated infrastructure overlap with other North Korean and APT43 activity.
Related profiles: Kimsuky, Lazarus Group
Profiles whose description names this actor, that this description names, or that share one of its names. The sources mention them together; they are not necessarily the same group.
ATT&CK techniques
MITRE ATT&CK has no technique mapping for this actor.
Incidents attributed
- No incident in the register is attributed to this actor.
Targets
No victim countries in the sources.
Relevance to the EU
EU relevance: Low
No EU member state among its known victims and no overlap with EU projects
No EU cooperation projects recorded in its target countries.
References