Skip to content
brandefense.io
Request A Demo
UnclassifiedIdeologyAdvanced sophistication

UNC6384

UNC6384 is a threat actor group with an ideological motive, tracked by Brandefense. It uses 2 MITRE ATT&CK techniques.

Request IOC feedRequest ATT&CK export
Techniques
2
Exploited CVEs
No CVE data
Record updated

About UNC6384.

A China-affiliated threat actor linked to attacks exploiting an unpatched Windows shortcut vulnerability. It has tactical and tooling overlaps with Mustang Panda and delivers PlugX malware.

Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.