[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV-HIH04hcYqhfm3zB3eJtjfNQbhUYTKdl2o0EV10B74":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":10,"target_industries":11,"target_countries":12,"incident_types":13,"references":14,"techniques":20,"technique_count":21,"created_at":22,"seoMetadata":23,"schemaOrg":27},"UNC1878","unc1878",[],"UNC1878 is a financially motivated threat actor that monetizes network access via the deployment of RYUK ransomware. Earlier this year, Mandiant published a blog on a fast-moving adversary deploying RYUK ransomware, UNC1878. Shortly after its release, there was a significant decrease in observed UNC1878 intrusions and RYUK activity overall almost completely vanishing over the summer. But beginning in early fall, Mandiant has seen a resurgence of RYUK along with TTP overlaps indicating that UNC1878 has returned from the grave and resumed their operations.",null,[],[],[],[15,16,17,18,19],"https:\u002F\u002Ftwitter.com\u002Fanthomsec\u002Fstatus\u002F1321865315513520128","https:\u002F\u002Fwww.fireeye.com\u002Fblog\u002Fthreat-research\u002F2020\u002F10\u002Fkegtap-and-singlemalt-with-a-ransomware-chaser.html","https:\u002F\u002Fgist.github.com\u002Faaronst\u002F6aa7f61246f53a8dd4befea86e832456","https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=CgDtm05qApE","https:\u002F\u002Fwww.fireeye.com\u002Fblog\u002Fthreat-research\u002F2020\u002F03\u002Fthe-cycle-of-adversary-pursuit.html",[],0,"2023-08-09T17:25:09.409843+00:00",{"title":24,"metaDescription":25,"keywords":26},"UNC1878 Threat Actor Profile | EdgeProtect","UNC1878 is a financially motivated threat actor that monetizes network access via the deployment of RYUK ransomware. Earlier this year, Mandiant publi...","UNC1878, threat actor, APT, cyber threat, threat intelligence",{"@context":28,"@type":29,"name":6,"alternateName":30,"description":9,"url":31,"mainEntityOfPage":32},"https:\u002F\u002Fschema.org","Organization",[],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Func1878",{"@type":33,"@id":31},"WebPage"]