TA577

TA577 is a prolific cybercrime threat actor tracked by Proofpoint since mid-2020. This actor conducts broad targeting across various industries and geographies, and Proofpoint has observed TA577 deliver payloads including Qbot, IcedID, SystemBC, SmokeLoader, Ursnif, and Cobalt Strike.

Qrupun mənşəyi Rusiya kimi bildirilir.

Digər adları: Hive0118

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://www.proofpoint.com/us/blog/threat-insight/first-step-initial-access-leads-ransomware
• https://thehackernews.com/2021/06/ransomware-attackers-partnering-with.html
• https://www.itpro.com/security/ransomware/359919/ransomware-criminals-look-to-other-hackers-to-provide-them-with-network

Mənbə: MISP Galaxy, Malpedia.