UNC4899 (8)
Events whose actors field, as written by the source, names this.
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| 2023-06 | JumpCloud | United States | UNC4899 |
| 2025-07 | Woo X | United States | UNC4899 |
| 2025-02-12 (datePublished) | TraderTraitor theft from a Japan-based company (as reported in December 2024 FBI/DC3/NPA statement) | Japan-based | UNC4899 (TraderTraitor) |
| Cloud Threat Horizons Report H2 2025 (no exact date on page) | UNC4899 social-engineering intrusions into Google Cloud and AWS environments leading to cryptocurrency theft (Q3 2024 to Q1 2025) | UNC4899 (TraderTraitor) | |
| 2025-11-05 (datePublished) | UNC4899 (PUKCHONG) misuse of Gemini | UNC4899 (aka PUKCHONG) | |
| 2026-07 | AFX Bridge | United Kingdom | UNC4899 |
| 2026-08-28 | Unknown Aug 28 2026 | ||
| Cloud Threat Horizons Report H1 2026 (no exact date on page) | UNC4899 Kubernetes compromise and cryptocurrency theft from a cryptocurrency organization (2025) | UNC4899 |