Skip to content

UNK_QuietRacket

UNK_QuietRacket is a nation-state APT group with an espionage motive, tracked by Brandefense. It targets 3 sectors, including Government and Finance, in Indonesia and Singapore. It uses 4 MITRE ATT&CK techniques and exploits 3 known CVEs.

Techniques
4
Exploited CVEs
3
First seen
Sep 3, 2026
Record updated

Who They Target.

Labelscyber-espionagedll-side-loadingdns-over-httpsexploit-kitscheduled-taskspearphishingsuspected-china-alignedtemporary-designator

About UNK_QuietRacket.

UNK_QuietRacket is a temporary designator for a suspected China-aligned cyber-espionage activity cluster first observed in September 2026. The cluster targeted government, consulting and financial-sector organizations in Indonesia and Singapore with conference-themed spearphishing that directed recipients to actor-controlled landing pages delivering the BlueMoon browser exploit kit. Observed post-exploitation activity used a DLL side-loading chain, encrypted DNS-over-HTTPS lookups, cloud-hosted delivery and command-and-control infrastructure, an in-memory.NET payload, and scheduled-task persistence. The China alignment remains an assessment; public evidence does not establish that UNK_QuietRacket is APT31/TA412 or another previously named group.

Last updated Sep 25, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.