FlagThis
← Threat Actors
/
Russia
/
UNC6353
DOSSIER // UNC6353
UNC6353
ACTIVE CAMPAIGN TRACKED
⚠ Critical Threat
Russia
Primary Aliases:
No secondary vendor aliases recorded.
Sponsor / State Affiliation
Russian government (suspected)
Primary Motivation
Espionage
Active Timeline
Unknown – Present
Confidence Rating
85% (Grounded)
DarkSword iOS Exploitation, Coruna Exploitation Campaign
📥 Export ATT&CK Layer (.json)
🔔 RSS Feed
🏛️ CISA Advisories ↗
📋 Copy Dossier Briefing
⚔️ Weaponized CVE Matrix
(0)
No specific weaponized CVEs currently mapped in the public baseline.
🎯 Target Sectors & Focus
Ukrainian civilians
Ukrainian mobile users
iOS users
🛡️ MITRE ATT&CK® Attack Lifecycle
(5 TTPs)
📥 Download Navigator JSON
All Stages
5
Initial Access
1
Operational Techniques
4
Initial Access
1
T1566
Watering hole attacks
↗
Operational Techniques
4
T1000
iOS full-chain exploitation
↗
T1000
Zero-day exploitation
↗
T1000
JavaScript-based exploitation
↗
T1000
Deployment of GHOSTBLADE malware
↗
📰 Verified Campaigns & Intelligence Archive
🔔 Subscribe to Alerts
No recent breaking campaign alerts recorded in the FlagThis threat database.
Adversary Rosetta Stone // UNC6353
×
Copied to clipboard
SHARE INTELLIGENCE WIRE
×
Story Title
X / Twitter
Bluesky
LinkedIn
Copy Link
LINK COPIED TO CLIPBOARD