Skip to content
brandefense.io
Request A Demo
UnclassifiedIdeologyAdvanced sophistication

UAT-5394

UAT-5394 is a threat actor group with an ideological motive, tracked by Brandefense.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
Record updated

About UAT-5394.

A North Korean-linked cluster employing advanced malware and demonstrating strategic shifts in infrastructure, including a transition from cloud services to attacker-owned command-and-control servers.

Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.