Incidents attributed to:

TA577

TA577 is a prolific cybercrime threat actor tracked by Proofpoint since mid-2020.

TA577 is a prolific cybercrime threat actor tracked by Proofpoint since mid-2020. This actor conducts broad targeting across various industries and geographies, and Proofpoint has observed TA577 deliver payloads including Qbot, IcedID, SystemBC, SmokeLoader, Ursnif, and Cobalt Strike.

Also known as

Hive0118.

References

proofpoint.com
thehackernews.com
itpro.com
exchange.xforce.ibmcloud.com

Actor metadata imported from Malpedia (Fraunhofer FKIE).