Skip to content
UnclassifiedUnknown

UNK_RemoteRogue

UNK_RemoteRogue is a Russia-attributed threat actor group, tracked by Brandefense.

Origin
Russia
Techniques
0
Exploited CVEs
No CVE data
Record updated

About UNK_RemoteRogue.

UNK_RemoteRogue is a suspected Russian threat actor that has been observed utilizing ClickFix in its infection chains, although this technique is not revolutionizing their operations but rather replacing existing installation methods. The group has a history of employing compromised intermediate mailservers, with specific infrastructure noted, such as the upstream concentrator at 80.66.66[.]197. UNK_RemoteRogue has been linked to phishing activities and has shown consistent patterns in its operational tactics.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.