Threat Investigation
Request a demo
Other threat group

UNC6032

UNC6032 is classified as other threat group.

Type
Other threat group
Origin
Vietnam

UNC6032 is a threat actor that weaponizes interest in AI tools, specifically targeting users with fake "AI video generator" websites to distribute malware, including Python-based infostealers and backdoors. Victims are typically directed to these sites through malicious social media ads that impersonate legitimate tools. Compromises have led to the exfiltration of sensitive data, including login credentials and credit card information, via the Telegram API. Google Threat Intelligence Group assesses UNC6032 to have a Vietnam nexus.

The group's reported origin is Vietnam.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.