SYMBOL | COMMON_NAME | aka. SYNONYMS |
TA578, a threat actor that Proofpoint researchers have been tracking since May of 2020. TA578 has previously been observed in email-based campaigns delivering Ursnif, IcedID, KPOT Stealer, Buer Loader, BazaLoader, and Cobalt Strike.
There are currently no families associated with this actor.
2022-04-28 ⋅ Proofpoint ⋅ This isn't Optimus Prime's Bumblebee but it's Still Transforming BumbleBee TA578 TA579 |