UNC4191

Reports per quarter

CVEs named in reports

• CVE-2021-31207 KEV ransomware
• CVE-2021-34473 KEV ransomware
• CVE-2021-34523 KEV ransomware
• CVE-2021-44207 KEV
• CVE-2021-44228 KEV ransomware
• CVE-2022-1388 KEV ransomware
• CVE-2022-21919 KEV
• CVE-2022-22954 KEV ransomware
• CVE-2022-22960 KEV
• CVE-2022-22972
• CVE-2022-30190 KEV ransomware
• CVE-2022-41040 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   Espionage group using USB devices to hack targets in Southeast Asia

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Espionage group using USB devices to hack targets in Southeast Asia

2. 7 September 2023

   My Tea’s not cold. An overview of China’s cyber threat

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor My Tea’s not cold. An overview of China’s cyber threat

3. 20 April 2023

   m_trends_2023_report.pdf

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor m_trends_2023_report.pdf

4. 28 November 2022

   Always Another Secret: Lifting the Haze on China-nexus Espionage in Southeast Asia | Mandiant

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Always Another Secret: Lifting the Haze on China-nexus Espionage in Southeast Asia | Mandiant

5. 28 November 2022

   Always Another Secret- Lifting the Haze on China-nexus Espionage in Southeast Asia

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Always Another Secret- Lifting the Haze on China-nexus Espionage in Southeast Asia

Newest first. Details opens the report in Explore.