UNC4393
MISP
Type:
Unknown
Unknown
Country:
Unknown
Unknown
First seen:
Unknown
Unknown
Details:
UNC4393 is a financially motivated threat actor primarily using BASTA ransomware. They have been active since early 2022 and have targeted over 40 organizations across various industries. UNC4393 has shown a willingness to cooperate with other threat clusters for initial access and has evolved from using existing tools to developing custom malware. They focus on efficient data exfiltration and multi-faceted extortion, often utilizing tools like COGSCAN and RCLONE for reconnaissance and data theft.
References (10)
- cloud.google.com - Unc4393 Goes Gently Into Silentnight
- security.com - Black Basta Ransomware Zero Day
- cloud.google.com - Detecting Disrupting Malvertising Backdoors
- microsoft.com - Threat Actors Misusing Quick Assist In Social Engineering Attacks Leading To Ransomware
- news.sophos.com - Sophos Mdr Tracks Two Ransomware Campaigns Using Email Bombing Microsoft Teams Vishing
- esentire.com - Ongoing Email Bombing Campaigns Leading To Remote Access And Post Exploitation
- redcanary.com - Storm 1811 Black Basta
- redcanary.com - Intelligence Insights June 2024
- x.com - 1881751635598139714
- techcommunity.microsoft.com - 4267916
Aliases (440)
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Storm-1811
CURLY SPIDER
STAC5777
Cardinal
Metadata
| ID: | 720 |
| Created: | 13/01/2026 17:48 |
| Updated: | 09/03/2026 16:00 |