Threat Investigation
Request a demo
Other threat group

TA2536

TA2536 is classified as other threat group.

Type
Other threat group
Origin
Nigeria

TA2536, which has been active since at least 2015, is likely Nigerian based on its unique linguistic style, tactics and tools. It uses keyloggers such as HawkEye and distinctive stylometric features in typo-squatted domains that resemble legitimate names and the use of recurring names and substrings in email addresses.

The group's reported origin is Nigeria.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

TA2536 · Threat actors · Dark Radar