Join Mandiant’s ThreatSpace and hone your skills against an advanced threat actor in an engaging exercise suitable for all levels. Learn how to apply practical threat intelligence and overcome real attacks with real skills for real impact. Challenges run concurrently with breakout sessions. UNC3944 is a financially motivated threat cluster active since at least early 2022. Primary Motivation: Financial extortion, heavily focused on stealing massive amounts of sensitive data. Tactics: The group typically gains initial network access using stolen credentials. They acquire these through targeted phishing operations or highly interactive social engineering directed at IT help desk personnel. Starting in early 2023, the group escalated their tactics to use their compromised access for ransomware deployment across victim environments.