[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-VFI7ikhNDTs805zZXKJG6SCzPadnPnUsotEoXXJM70":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":10,"country":11,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":14,"references":15,"techniques":17,"technique_count":18,"created_at":19,"seoMetadata":20,"schemaOrg":24},"STORM-1849","storm-1849",[9],"UAT4356","UAT4356 is a state-sponsored threat actor that targeted government networks globally through a campaign named ArcaneDoor. They exploited two zero-day vulnerabilities in Cisco Adaptive Security Appliances to deploy custom malware implants called \"Line Runner\" and \"Line Dancer.\" The actor demonstrated a deep understanding of Cisco systems, utilized anti-forensic measures, and took deliberate steps to evade detection. UAT4356's sophisticated attack chain allowed them to conduct malicious actions such as configuration modification, reconnaissance, network traffic capture\u002Fexfiltration, and potentially lateral movement on compromised devices.",null,[],[],[],[16],"https:\u002F\u002Fblog.talosintelligence.com\u002Farcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices\u002F",[],0,"2024-04-27T01:15:03.854482+00:00",{"title":21,"metaDescription":22,"keywords":23},"STORM-1849 Threat Actor Profile | EdgeProtect","UAT4356 is a state-sponsored threat actor that targeted government networks globally through a campaign named ArcaneDoor. They exploited two zero-day ...","STORM-1849, UAT4356, threat actor, APT, cyber threat, threat intelligence",{"@context":25,"@type":26,"name":6,"alternateName":27,"description":10,"url":28,"mainEntityOfPage":29},"https:\u002F\u002Fschema.org","Organization",[9],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fstorm-1849",{"@type":30,"@id":28},"WebPage"]