G1018 TA2541
Enterprisealso known asTA2541
TA2541 is a cybercriminal group that has been targeting the aviation, aerospace, transportation, manufacturing, and defense industries since at least 2017. TA2541 campaigns are typically high volume and involve the use of commodity remote access tools obfuscated by crypters and themes related to aviation, transportation, and travel.
01
canonical actor
The group this is attributed to.
02
techniques used (28)
ATT&CK techniques this enables or maps to.
showing 20 of 28
03
software used (9)
Malware and tools associated with this.
04
source
Where this definition is published.