TA577
threat actorRU01
also known as
Other names and identifiers for this entity.
MISP
Hive0118 · TA577
TA577 is a prolific cybercrime threat actor tracked by Proofpoint since mid-2020. This actor conducts broad targeting across various industries and geographies, and Proofpoint has observed TA577 deliver payloads including Qbot, IcedID, SystemBC, SmokeLoader, Ursnif, and Cobalt Strike.
02
references
External citations — patches, advisories, analysis.
- https://www.proofpoint.com/us/blog/threat-insight/first-step-initial-access-leads-ransomware
- https://thehackernews.com/2021/06/ransomware-attackers-partnering-with.html
- https://www.itpro.com/security/ransomware/359919/ransomware-criminals-look-to-other-hackers-to-provide-them-with-network
- https://exchange.xforce.ibmcloud.com/threat-group/guid:1dda890fa2662ed26b451c703e922315