AdversaryGraph public intelligence page
This page is part of Threat Matrix, the public browser workspace for the main AdversaryGraph platform. Use it for ATT&CK pivots, actor and technique context, similarity leads, detection coverage review, and analyst-ready investigation paths.
Validation disclaimer: TTP overlap, actor similarity, generated summaries, and coverage findings are investigation leads, not attribution proof or operational validation without analyst review.
Main AdversaryGraph project Documentation Malware Analysis GitHub
TA578
Aliases: None listed
TA578 is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including Latrodectus, IcedID, and Bumblebee.
Open interactive actor investigation
ATT&CK techniques
Correlated CTI and IR reports
Continue the investigation
Cyber Knowledge routes
These contextual routes explain behaviors associated with this ATT&CK group record. They support learning and investigation planning; they do not add attribution evidence.
Vulnerability Research & Exploit Development · explicit-nameWeakness taxonomy and vulnerability identity
Vulnerability Research & Exploit Development · topic-matchModule 6 — Alert triage, investigation, and escalation
Blue Team & Defensive Security · topic-matchModule 5 — Cloud, containers, and Kubernetes
Red Team & Offensive Security · tactic-routeStatic triage: strings, imports, resources, and capabilities
Malware Analysis & Reverse Engineering · tactic-routeModule 4 — Detection engineering and detection as code
Blue Team & Defensive Security · tactic-routeModule 4 — Collection Sources
Cyber Threat Intelligence (CTI) · tactic-routeModule 3 — Vulnerability discovery and validation
Red Team & Offensive Security · tactic-routeAuthority, ethics, privacy, safety, and operational security
OSINT & Reconnaissance · tactic-route