UNC2814

UNC2814 is a suspected PRC-nexus threat cluster active since 2017, known for the GRIDTIDE backdoor that abused the Google Sheets API for command-and-control. Distinct from CL-STA-1087, a separate China-linked cluster targeting the same region.