UNC2891
UNC2891 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Finance sector. It uses 3 MITRE ATT&CK techniques.
- Techniques
- 3
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2020
- Record updated
Who They Target.
Sectors · 1
About UNC2891.
A secretive cybercrime group that combines digital hacking with physical tampering to drain ATMs.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.