UNC6040
Also reported as Storm-2581.
Reports per quarter
Techniques seen in the last two years
- T1078.002 2 reports
- T1528 2 reports
- T1566.004 2 reports
- T1589.002 2 reports
- T1003.002 1 report
- T1003.003 1 report
- T1046 1 report
- T1069 1 report
- T1072 1 report
- T1078.004 1 report
Show all 34 techniques Show fewer
- T1087 1 report
- T1087.002 1 report
- T1110.004 1 report
- T1114.003 1 report
- T1134 1 report
- T1190 1 report
- T1210 1 report
- T1213 1 report
- T1219 1 report
- T1486 1 report
- T1530 1 report
- T1552.005 1 report
- T1555.003 1 report
- T1566 1 report
- T1567 1 report
- T1567.002 1 report
- T1570 1 report
- T1580 1 report
- T1589.001 1 report
- T1593 1 report
- T1598 1 report
- T1621 1 report
- T1650 1 report
- T1657 1 report
Counts come from technique IDs in the actor's report text.
CVEs named in reports
- CVE-2020-0688 KEV ransomware
- CVE-2021-35464 KEV ransomware
- CVE-2025-24893 KEV
- CVE-2025-55182 KEV ransomware
- CVE-2025-61882 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
Show all 14 reports Show fewer
Newest first. Details opens the report in Explore.