Undisclosed FinTech entity · 09/02/2026
Researchers at Google Mandiant identify UNC1069, a North Korean-linked actor, using AI-generated personas and professional networking platforms to target cryptocurrency firms, leading to the delivery of the customized malware. [Date Occurred: 'Recently'; Date Discovered: 'Recently']
UNC1069 intrusion at a FinTech entity using compromised Telegram account, fake Zoom meeting and deepfake · 2026-02-09 (datePublished)
Mandiant recently investigated an intrusion targeting a FinTech entity within this sector, attributed to UNC1069, a financially motivated threat actor active since at least 2018. ... The victim reported that during the call, they were presented with a video of a CEO from another cryptocurrency company that appeared to be a deepfake.
Hello? I can’t hear you: Investigating UNC1069’s Fake Meeting Tactics · 2026-04-14T00:00:00Z
UNC1069 (overlapping with Bluenoroff ) is a financially motivated North Korean threat actor reported by Mandiant , known for conducting sophisticated social engineering campaigns. This cluster was also responsible for the recent Axios NPM package compromise. ... Their primary targets are individuals and organizations in the financial and cryptocurrency sectors.