Intel Name: Revisiting unc3886 tactics to defend against present risk
Date of Scan: July 29, 2025
Impact: High
Summary: UNC3886 is a sophisticated APT group known for targeting critical infrastructure sectors such as telecommunications, government, technology, and defense. Recently, it launched an attack against Singapore, exploiting zero-day and high-impact vulnerabilities in devices like VMware vCenter/ESXi, Fortinet FortiOS, and Juniper Junos OS. On July 18, Singapore’s Coordinating Minister for National Security, K. Shanmugam, confirmed the presence of a highly advanced threat actor—UNC3886—actively targeting the nation’s vital services. First identified in 2022, the group continues to pose a serious threat to Singapore’s national security.