UAT-6382

Linked to China by two sources.

Reports: 2
Last reported: 5 May 2026
Known CVEs: 2
Origin: China

ID: uat-6382
Sources: MISP Malpedia
Merge evidence: 1 alias match

Reports per quarter

2025 Q2: 1 report
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2025 Q2 to 2026 Q2.

CVEs named in reports

CVE-2025-0944
CVE-2025-0994 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

5 May 2026

UAT-8302 and its box full of malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor UAT-8302 and its box full of malware
22 May 2025

UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware

Newest first. Details opens the report in Explore.