| SYMBOL | COMMON_NAME | aka. SYNONYMS |
One of the most active Qbot malware affiliates, Proofpoint has tracked the large cybercrime threat actor TA570 since 2018.
There are currently no families associated with this actor.
| 2022-06-09
⋅
SANS ISC
⋅
TA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt) QakBot TA570 |
| 2022-06-07
⋅
The Record
⋅
Hackers using Follina Windows zero-day to spread Qbot malware TA570 |
| 2022-05-09
⋅
Microsoft
⋅
Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself BRONZE STARLIGHT Mustard Tempest TA570 Velvet Tempest WIZARD SPIDER |
| 2021-06-16
⋅
Proofpoint
⋅
The First Step: Initial Access Leads to Ransomware BazarBackdoor Egregor IcedID Maze QakBot REvil Ryuk TrickBot WastedLocker TA570 TA575 TA577 |