Threat Intelligence / Actor / Multiple Russia-Aligned (APT44/Sandworm, UNC5792, UNC4221, Turla, UNC1151)

Multiple Russia-Aligned (APT44/Sandworm, UNC5792, UNC4221, Turla, UNC1151)

Nation: Russia, Belarus · 1 tracked threat(s) · Categories: APT

Also known as: APT44, Sandworm, Seashell Blizzard, UNC5792, UAC-0195, UNC4221, UAC-0185, Turla, UNC1151

Tracked threats

State-Sponsored Signal Messenger Hijacking — QR Code Phishing Abusing Linked Devices, WAVESIGN Database Exfiltration, Infamous Chisel Android Malware (APT44/Sandworm, Turla, UNC5792, UNC4221, UNC1151) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence