Threat Intelligence / Actor / UAT-4356 / ArcaneDoor

UAT-4356 / ArcaneDoor

Nation: Russia · 1 tracked threat(s) · Categories: MALWARE

Also known as: UAT-4356, ArcaneDoor, STORM-1849, Storm-1849

Tracked threats

Firestarter Malware Persists on Cisco ASA/Firepower Through Firmware Updates (CVE-2025-20333, CVE-2025-20362) — UAT-4356/ArcaneDoor — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence