Skip to content

UNC5342

Named by 2 kept items in this workspace.

Search every workspace for UNC5342. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Earliest Known PolinRider Malware Found in 2025 npm Packages
    writeup2026-10-30It is written here as UNC5342 (Google Threat Intelligence documented its use of JADESNOW to deliver INVISIBLEFERRET; same BNB Smart Chain contract, owner wallet and transaction lineage).

    Google Threat Intelligence documented its use of JADESNOW to deliver INVISIBLEFERRET; same BNB Smart Chain contract, owner wallet and transaction lineage

  • DPRK and Iran are Leading a 5.2x Surge YoY in Blockchain-Assisted Cyberattacks
    article2026-09-17

    DPRK-linked group tracked by Google Threat Intelligence Group (GTIG, which incorporates Mandiant); since February 2025 uses smart contracts on public blockchains (EtherHiding) to deliver malware to job-seeking cryptocurrency developers via fake recruiters; also linked by Chainalysis on-chain analysi

All threat actors in this workspace.