UnsolicitedBooker
UnsolicitedBooker is a threat actor group with an ideological motive, tracked by Brandefense. It uses 15 MITRE ATT&CK techniques.
- Techniques
- 15
- Exploited CVEs
- No CVE data
- Record updated
About UnsolicitedBooker.
UnsolicitedBooker is a China-aligned APT group known for its persistent targeting of an unnamed international organization in Saudi Arabia, employing a backdoor called MarsSnake. The group utilizes spear-phishing emails, often featuring flight tickets as decoys, to infiltrate governmental organizations across Asia, Africa, and the Middle East. Their operations have included multiple intrusion attempts over several years, demonstrating a sustained interest in their target. MarsSnake provides significant control over infected machines, allowing for arbitrary command execution and file access.
Last updated Sep 12, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.