UNK_DropPitchThreat actor
Between March and June 2025, Proofpoint identified multiple China-aligned threat actors specifically targeting Taiwanese organizations within the semiconductor industry. This included a China-aligned threat actor tracked as UNK_FistBump targeting semiconductor design, manufacturing, and supply chain organizations in employment-themed phishing campaigns resulting in the delivery of Cobalt Strike…From MISP Galaxy
Last reported 12 months ago, by Volexity1 report
ATT&CK techniques
1 technique · each with the sentence it comes from- T1053.005Scheduled Task
“All variants observed by Volexity make use of a scheduled task for persistence and provide the operator the ability to execute arbitrary commands on the target’s device.”
What the reports say
1 report, newest first · the exact sentence from each-
APT Meets GPT: Targeted Operations with Untamed LLMs“Volexity notes that UTA0388 is the same actor that Proofpoint tracks as “UNK_DropPitch”, as described in a blog post published on July 16, 2025.”
Indicators in its reports
named in the reports above- hxxps://aesthetic-donut-1af43s2.netlify[.]app/file/rarin 1 report
- aesthetic-donut-1af43s2.netlify[.]appin 1 report
- hxxps://aesthetic-donut-1af43s2.netlify[.]app/index/file/A_Introduction_Docs_v00546823.rarin 1 report
- moctw[.]infoin 1 report
- twmoc[.]infoin 1 report
- cdn-apple[.]infoin 1 report
- azure-app[.]storein 1 report
- doccloude[.]infoin 1 report
- sliddeshare[.]onlinein 1 report
- windows-app[.]storein 1 report
- researchanalytics.co[.]ukin 1 report
- globalsolutionsinc[.]comin 1 report
Copy these 12 indicators · defanged
Thanks — we review every report.