Mandiant UNC Designations
'Uncategorized' tracking IDs before attribution
Mandiant labels newly-seen activity clusters as UNC#### ('uncategorized') until it has enough evidence to graduate them to a named group like APT## or FIN##. UNC5537 is an example.