Skip to content
China-linked UNC6384 Targets European Diplomatic Missions with New Cyberattacks

China-linked UNC6384 Targets European Diplomatic Missions with New Cyberattacks

First seen 23 Nov 2025, 03:35 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A hacking group linked to China, known as UNC6384, has launched a cyberattack campaign targeting European diplomatic and government networks. The attacks exploit a new Windows vulnerability and are believed to have occurred between September and October 2025. Additionally, reports indicate that China-based hackers are also targeting U.S. federal and state networks via unpatched Cisco firewalls.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 243d ago How this analysis works

More articles in this cluster (6)

Following this threat?

Track UNC6384 and Cisco in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed