Threat actorChina / RussiaTracked since 2026-04

UNC5174 + uncategorized Russian-nexus cluster

Also known as:UNC5174UteusUetusCASTLERUN

As of 2026-05-30, UNC5174 + uncategorized Russian-nexus cluster is a China / Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning vulnerability. Also known as UNC5174, Uteus, Uetus, CASTLERUN.

Tracked threats: 11 critical
First seen: 2026-042026-04-17
Last seen: 2026-042026-04-17
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 4Referenced by its activity
Attribution: China / RussiaNation or origin

Nation: China / Russia · 1 tracked threat(s) · Categories: VULNERABILITY

Activity timeline

UNC5174 + uncategorized Russian-nexus cluster appears in 1 tracked threat between 2026-04-17 and 2026-04-17.

Tracked threats

CitrixBleed 3 — CVE-2026-3055 & CVE-2026-4368 NetScaler ADC/Gateway Memory Overread and Session HijackCRITICAL2026-04-17

Related CVEs

4 CVEs referenced by tracked UNC5174 + uncategorized Russian-nexus cluster activity