UAC-0185

Group M Lost Potential RottenShrew UNC4221

▲ High Threat

Edge Device Vulnerability Exploitation, Custom Malware Deployment Operations

Origin unknown

Sponsor unknown

Motivation Espionage

Target Sectors

Government Defense Aerospace Telecommunications Critical Infrastructure

Exploitation of Public-Facing Applications (T1190)

Living-off-the-Land (T1059)

Credential Access (T1003)

Custom Malware Deployment (RottenShrew/Lost Potential)

Lateral Movement (T1021)

Valid Accounts (T1078)

CISA Advisories ↗

Strategies and Tactics 2026-07-04