UNC4841

Also reported as SLIME57. Linked to China by two sources.

Reports: 17
Last reported: 6 April 2026
Known CVEs: 59
Origin: China

ID: unc4841
Sources: MISP Malpedia
Merge evidence: 2 alias matches

Reports per quarter

2019 Q2: 1 report
2019 Q3: no reports
2019 Q4: no reports
2020 Q1: no reports
2020 Q2: no reports
2020 Q3: no reports
2020 Q4: no reports
2021 Q1: no reports
2021 Q2: no reports
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: 2 reports
2023 Q3: 2 reports
2023 Q4: 1 report
2024 Q1: no reports
2024 Q2: 6 reports
2024 Q3: no reports
2024 Q4: 1 report
2025 Q1: 1 report
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 3 reports

Dated reports, 2019 Q2 to 2026 Q2.

CVEs named in reports

Show all 59 CVEs Show fewer

CVE-2017-0144 KEV ransomware
CVE-2017-0199 KEV ransomware
CVE-2017-11882 KEV ransomware
CVE-2018-0798 KEV
CVE-2018-0802 KEV ransomware
CVE-2019-0803 KEV ransomware
CVE-2019-18935 KEV ransomware
CVE-2020-12641 KEV
CVE-2020-35730 KEV
CVE-2021-20021 KEV ransomware
CVE-2021-20022 KEV ransomware
CVE-2021-20023 KEV ransomware
CVE-2021-22893 KEV ransomware
CVE-2021-44026 KEV
CVE-2021-44228 KEV ransomware
CVE-2021-44515 KEV
CVE-2022-1040 KEV
CVE-2022-21587 KEV ransomware
CVE-2022-27518 KEV
CVE-2022-30190 KEV ransomware
CVE-2022-30333 KEV ransomware
CVE-2022-3236 KEV
CVE-2022-41328 KEV
CVE-2022-41352 KEV ransomware
CVE-2022-42475 KEV ransomware
CVE-2022-47966 KEV ransomware
CVE-2022-47986 KEV ransomware
CVE-2023-0669 KEV ransomware
CVE-2023-20198 KEV
CVE-2023-20867 KEV
CVE-2023-23397 KEV
CVE-2023-26360 KEV
CVE-2023-28461 KEV ransomware
CVE-2023-2868 KEV
CVE-2023-28681
CVE-2023-28771 KEV
CVE-2023-34362 KEV ransomware
CVE-2023-3519 KEV ransomware
CVE-2023-38831 KEV ransomware
CVE-2023-42793 KEV ransomware
CVE-2023-46805 KEV ransomware
CVE-2023-4966 KEV ransomware
CVE-2023-7101 KEV
CVE-2023-7102
CVE-2024-21887 KEV ransomware
CVE-2024-21893 KEV ransomware
CVE-2027-11882

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

6 April 2026

ShadowPad (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor ShadowPad (Malware Family)
6 April 2026

Advanced threat predictions for 2024

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Advanced threat predictions for 2024
6 April 2026

Securonix Threat Labs Monthly Intelligence Insights – June 2023

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Securonix Threat Labs Monthly Intelligence Insights – June 2023
21 January 2025

JSAC2025_1_5_leon-chang_theo-chen_en.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor JSAC2025_1_5_leon-chang_theo-chen_en.pdf
25 November 2024

Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Game of Emperor: Unveiling Long Term Earth Estries Cyber Intrusions
12 June 2024

Insights on Cyber Threats Targeting Users and Enterprises in Brazil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Insights on Cyber Threats Targeting Users and Enterprises in Brazil
8 May 2024

01-chinese-espionage-article-m-trends-2024.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 01-chinese-espionage-article-m-trends-2024.pdf
1 May 2024

cyberespionage_report_2023.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor cyberespionage_report_2023.pdf
22 April 2024

m-trends-2024.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m-trends-2024.pdf
19 April 2024

Asia-24-Chen-Chinese-APT.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Asia-24-Chen-Chinese-APT.pdf

Show all 17 reports Show fewer

2 April 2024

APT and financial attacks on industrial organizations in H2 2023 | Kaspersky ICS CERT EN

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor APT and financial attacks on industrial organizations in H2 2023 | Kaspersky ICS CERT EN
24 December 2023

Barracuda Email Security Gateway Appliance (ESG) Vulnerability

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Barracuda Email Security Gateway Appliance (ESG) Vulnerability
29 August 2023

Diving Deep into UNC4841 Operations Following Barracuda ESG Zero-Day Remediation (CVE-2023-2868) | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Diving Deep into UNC4841 Operations Following Barracuda ESG Zero-Day Remediation (CVE-2023-2868) | Mandiant
18 July 2023

Stealth Mode: Chinese Cyber Espionage Actors Continue to Evolve Tactics to Avoid Detection | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Stealth Mode: Chinese Cyber Espionage Actors Continue to Evolve Tactics to Avoid Detection | Mandiant
15 June 2023

Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to China

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to China
15 June 2023

Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to China

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to China
12 April 2019

Blog Archive - SpamTitan Email Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blog Archive - SpamTitan Email Security

Newest first. Details opens the report in Explore.