Unc5342 is a apt_group tracked across 2 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed May 26, 2026; most recent activity May 26, 2026.
The Google Threat Intelligence Group (GTIG) reports that North Korean threat actor UNC5342 has adopted a new technique called EtherHiding to deliver malware and facilitate cryptocurrency theft. This method embeds…
In May 2026, TrendAI™ Research reported on a cyber intrusion involving the ClearFake campaign, where threat actors utilized the EtherHiding technique to deliver payloads via smart contracts on the BNB Smart Chain…