UNC1069

Named by 4 kept items in this workspace.

3 items name it under threat actors and 1 under classification.key entities.

Search every workspace for UNC1069. It matches the name as written, so it can find other things that share it.

The items that name it 4

Threat Actor Targets Crypto Organizations | Wiz Blog
writeupas classification.key entities2026-05-27
Tradecraft Tuesday Recap: axios npm Supply Chain Compromise
articleas threat actors2026-04-21
Financially motivated North Korean (DPRK) threat actor active since at least 2018; attributed by Google as responsible for the axios npm supply chain compromise
Supply Chain Compromise of axios npm Package
writeupas threat actors2026-03-31
Suspected North Korean state-sponsored threat actor attributed to this attack by Google Threat Intelligence Group
973 MCP Packages, 71% Single-Maintainer: A Practitioner
articleas threat actorsIt is written here as UNC1069 (North Korean group; on March 31, 2026 hijacked the real axios npm package).
North Korean group; on March 31, 2026 hijacked the real axios npm package

All threat actors in this workspace.