UNC3886 is a threat group documented by Mandiant that used VMware VMCI sockets for persistence between compromised ESXi hosts and guest VMs. This technique is similar to SLEEPWALKER's use of VMCI for stealthy communication.
UNC3886 is a threat group documented by Mandiant that used VMware VMCI sockets for persistence between compromised ESXi hosts and guest VMs. This technique is similar to SLEEPWALKER's use of VMCI for stealthy communication.