MITRE ATT&CKgroup
G1037 TA577
- Domain
- enterprise
- Version
- 1.0
- Created
- 2024-09-17
Description
TA577 is an initial access broker (IAB) that has distributed QakBot and Pikabot, and was among the first observed groups distributing Latrodectus in 2023.
Related
Uses · MITRE ATT&CK (9)
- S1160 Latrodectus software (malware)
- S1145 Pikabot software (malware)
- T1027.009 Embedded Payloads sub-technique
- S0650 QakBot software (malware)
- T1586.002 Email Accounts sub-technique
- T1059.007 JavaScript sub-technique
- T1204.001 Malicious Link sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1566.002 Spearphishing Link sub-technique
References
- https://www.proofpoint.com/us/blog/threat-insight/latrodectus-spider-bytes-ice Latrodectus APR 2024