Threat actor profile

UNC4736

A source-linked view of reported activity, targets and related automated campaign clusters.

Attribution caveat.Names and aliases reflect source reporting. They do not independently prove identity or responsibility.

1Reports

1Independent sources

49Highest signal

30 Jul 2026Latest activity

Known aliases

UNC4736

Correlated campaigns

APT29: recently observed activity55% confidence · 1 reports UNC4736: recently observed activity55% confidence · 1 reports UNC6780: recently observed activity55% confidence · 1 reports UNC1069: recently observed activity55% confidence · 1 reports

Supporting reports

Google Threat Intelligence Group · 30 Jul 2026

Batten Down Your Packages: Mitigation Guidance for Supply Chain Compromise ↗

Written by: Kelli Vanderlee, Stuart Carrera For years, the cybersecurity industry's understanding of software supply chain compromise has been anchored by a few watershed events, including Russian cyber espionage actor ICE RELIC’s (formerly known as APT29) 2020 compromise…