Threat Intelligence / Actor / UNC5174 / SNOWLIGHT

UNC5174 / SNOWLIGHT

Nation: China · 1 tracked threat(s) · Categories: MALWARE

Also known as: UNC5174, Uteus, Earth Lamia, Operation DRAGONCLONE

Tracked threats

Vshell C2 Framework — Chinese-Language Cobalt Strike Alternative in APT Campaigns (UNC5174/SNOWLIGHT, Operation DRAGONCLONE) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence