Automated evidence cluster

UNC4736: recently observed activity

Automatically correlated reporting linking UNC4736 to recently reported activity. Review the supporting sources before treating attribution as confirmed.

55% correlation confidence.This grouping supports investigation. It is not a definitive attribution or a vendor-assigned campaign name.

1Reports

1Sources

49Highest signal

30 Jul 2026Latest activity

Actors in supporting reports

APT29UNC1069UNC4736UNC6780

Supporting evidence

Google Threat Intelligence Group · 30 Jul 2026

Batten Down Your Packages: Mitigation Guidance for Supply Chain Compromise ↗

Written by: Kelli Vanderlee, Stuart Carrera For years, the cybersecurity industry's understanding of software supply chain compromise has been anchored by a few watershed events, including Russian cyber espionage actor ICE RELIC’s (formerly known as APT29) 2020 compromise…