G1038 · 4 ATT&CK techniques · 0 correlated reports

TA578

Aliases: None listed

TA578 is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including Latrodectus, IcedID, and Bumblebee.

Open interactive actor investigation

ATT&CK techniques

T1204.001
Malicious LinkT1594
Search Victim-Owned WebsitesT1583.006
Web ServicesT1059.007
JavaScript

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research