UNC4191 Threat Group Targets Entities In The Philippines
The UNC4191 threat group was discovered targeting entities in the Philippines with custom malware and the NCAT command-line networking utility.
The malicious software is written in C/C++, replicates by infecting new removable drives, and creates a reverse shell to the actor's command and control server.
Registry Run keys are used for persistence while multiple legitimate binaries are leveraged for DLL Side-Loading.
Featured Resources
View More Resources
blog
MITRE ATLAS AI Security Framework: Tactics and Techniques Explained
AI models, copilots and agents are now part of the enterprise attack surface. By connecting them to corporate data, repositories,
blog
Operationalizing Agentic Cyber Defense Engineering for SecOps
Security operations teams spend too much of each day gathering context, configuring assessments, correlating evidence and coordinating follow-up actions across
blog
Post-Mythos Security: How Security Teams Can Build an AI-Accelerated Defense Loop
Build an AI-accelerated defense loop to validate exposure, prioritize proven risk, adapt controls and re-prove resilience.