Skip to content
brandefense.io
Request A Demo
CybercrimeFinancial

UNC5537

UNC5537 is a Canada-attributed cybercrime syndicate with a financial motive, tracked by Brandefense.

Request IOC feedRequest ATT&CK export
Origin
Canada
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2024
Record updated

About UNC5537.

Snowflake is a multi-cloud data warehousing platform used to store and analyze large amounts of structured and unstructured data. UNC5537 is systematically compromising Snowflake customer instances using stolen customer credentials, advertising victim data for sale on cybercrime forums, and attempting to extort many of the victims.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.