Sign in Subscribe

UNC6395

UNC6395 is a distinct threat cluster tied to the 2025 Salesloft Drift OAuth token theft campaign. Despite frequent overlap in reporting, it is not the same actor as ShinyHunters (UNC6040) or Scattered Spider (UNC3944).