Cybercrime
TA578
TA578 is classified as cybercrime.
- Type
- Cybercrime
- Malware families
- 2
TA578, a threat actor that Proofpoint researchers have been tracking since May of 2020. TA578 has previously been observed in email-based campaigns delivering Ursnif, IcedID, KPOT Stealer, Buer Loader, BazaLoader, and Cobalt Strike.
The group is associated with 2 malware families.
The group is associated with 2 malware families.
Malware families
- BumbleBee
- SSLoad
Published reports on this actor:
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.