Threat Intelligence / Actor / Multiple — APT27 (PRC), APT45 (DPRK), UNC2814 (PRC), UNC5673 (PRC), UNC6201 (PRC), TeamPCP/UNC6780 (cyber crime), suspected Russia-nexus (CANFAIL/LONGSTREAM), pro-Russia IO actors (Operation Overload)

Multiple — APT27 (PRC), APT45 (DPRK), UNC2814 (PRC), UNC5673 (PRC), UNC6201 (PRC), TeamPCP/UNC6780 (cyber crime), suspected Russia-nexus (CANFAIL/LONGSTREAM), pro-Russia IO actors (Operation Overload)

Nation: China, North Korea, Russia · 1 tracked threat(s) · Categories: APT

Also known as: APT27, Emissary Panda, Iron Tiger, Bronze Union, APT45, Andariel, Onyx Sleet, Stonefly, UNC2814, UNC5673, TEMP.Hex, UNC6201

Tracked threats

GTIG AI Threat Tracker (May 2026) — First AI-Developed Zero-Day Exploit (2FA Bypass), PROMPTFLUX/HONESTCUE/CANFAIL/LONGSTREAM/PROMPTSPY AI-Enabled Malware, and APT27/APT45/UNC2814/UNC5673/UNC6201/TeamPCP AI-Augmented Operations — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence