Loading threat actor…
The United National Liberation Front (UNLF) is a Meitei insurgent organization from Manipur in India’s northeast. It is part of the broader landscape of armed separatist groups operating around the India-Myanmar border. Reporting specifically identifies a hardline faction of the UNLF as having aligned with the Myanmar military against resistance groups active in Myanmar’s Sagaing Region. This places the organization within a cross-border insurgent environment shaped by long-running militancy, shifting alliances, and sanctuary dynamics spanning Manipur and western Myanmar. The UNLF is associated with armed insurgent activity rather than cyber operations. In the available information, it appears alongside other Meitei militant outfits including the People’s Liberation Army, factions of the People’s Republican Party of Kangleipak, and Kanglei Yawol Kanna Lup. No high-confidence information is provided here about distinct cyber capabilities, ransomware activity, or specific intrusion tradecraft attributable to the UNLF. The available facts support characterization of the group as a separatist militant actor involved in regional armed conflict dynamics, with activity linked to Manipur and operational alignment involving actors in Myanmar.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.