Threat Intelligence / Actor / UNC5174 + uncategorized Russian-nexus cluster

UNC5174 + uncategorized Russian-nexus cluster

As of 2026-07-26, UNC5174 + uncategorized Russian-nexus cluster is a China / Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning vulnerability. Also known as UNC5174 (Chinese-nexus) + uncategorized Russian-nexus cluster, UNC5174, Uteus, Uetus.

Nation: China / Russia · 1 tracked threat(s) · Categories: VULNERABILITY

Also known as: UNC5174 (Chinese-nexus) + uncategorized Russian-nexus cluster, UNC5174, Uteus, Uetus, CASTLERUN

Tracked threats

CitrixBleed 3 — CVE-2026-3055 & CVE-2026-4368 NetScaler ADC/Gateway Memory Overread and Session Hijack — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence