Unc6040 — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 20, 2025
Last Seen
June 5, 2026

Related Threat Clusters

  • New Pink Extortion Group Targets Microsoft 365 via Voice Phishing

    The newly identified Pink extortion group has emerged, utilizing voice phishing (vishing) tactics to gain access to Microsoft 365 accounts. Researchers from Unit 42 have tracked the group under cluster designation…

    9 articles · Updated June 4, 2026
  • Rise of AI-Driven Scams Targeting UK SMEs

    UK small and medium-sized enterprises (SMEs) are increasingly vulnerable to sophisticated AI-driven scams, as highlighted by recent reports. The emergence of 'AI scams 2.0' combines traditional social engineering…

    802 articles · Updated March 12, 2026
  • Gainsight Apps Breach Exposes Data of Over 200 Salesforce Customers

    A significant supply chain attack has compromised Salesforce-stored data from more than 200 companies through applications published by Gainsight. Salesforce confirmed unauthorized access to customer data and is…

    30 articles · Updated November 23, 2025
  • Data Breach Affects Over 200 Companies via Gainsight Integration with Salesforce

    Hackers compromised Salesforce-stored data from more than 200 companies through a supply chain attack involving Gainsight applications. Google confirmed the breach, stating that unauthorized access to customer data was…

    44 articles · Updated November 27, 2025

Recent Intelligence Reports

  • Voice Phishing Data Extortion — cloud.google.com · June 5, 2026
  • The phone call is the new phishing email — Cyberscoop · March 23, 2026
  • Hundreds of Salesforce customers hit by yet another third — Cyberscoop · November 20, 2025

CVSS v3.1 Breakdown