UnclassifiedIdeologyAdvanced sophistication
UAT-7237
UAT-7237 is a threat actor group with an ideological motive, tracked by Brandefense.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About UAT-7237.
A Chinese-speaking APT subgroup active since at least 2022, targeting Taiwanese web hosting infrastructure. They use customized open-source tools and a bespoke shellcode loader named 'SoundBill'.
Last updated Jul 25, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.