Skip to content
brandefense.io
Request A Demo
CybercrimeFinancialAdvanced sophistication

UNC6229

UNC6229 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 16 MITRE ATT&CK techniques.

Request IOC feedRequest ATT&CK export
Techniques
16
Exploited CVEs
No CVE data
First seen
Oct 26, 2025
Last seen
Oct 26, 2025
Record updated

About UNC6229.

A collaborative cluster of financially motivated individuals based in Vietnam, sharing tools, techniques, and infrastructure on private forums. They demonstrate operational maturity and resource availability through patient, personalized social engineering and abuse of legitimate commercial platforms.

Last updated Sep 21, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.