Skip to content
brandefense.io
Request A Demo
UnclassifiedIdeologyAdvanced sophistication

UNC5291

UNC5291 is a threat actor group with an ideological motive, tracked by Brandefense.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
Record updated

About UNC5291.

China-nexus threat group previously linked to exploiting Ivanti zero-days and using custom malware like Zipline and Spawnant. Active in F5's network for at least a year.

Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.