UNC5537UNC5537

Also known as: UNC5537

Known aliases
1

Profile

UNC5537 is a financially motivated threat actor targeting Snowflake customer databases. They use stolen credentials obtained from infostealer malware to access and exfiltrate large volumes of data. The compromised accounts lack multi-factor authentication, allowing UNC5537 to conduct data theft and extortion.

Aliases· 1

UNC5537

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
UNC6395
Actor
UNC5337
Actor
UNC6671
Actor
UNC2447
Actor
UNC3569
Actor
UNC3524
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.