- Category
- Tracked, unattributed · A vendor’s working cluster, not yet attributed.
- Origin
- Unknown
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0987 · ta579
What it is
TA579, a threat actor that Proofpoint researchers have been tracking since August 2021. This actor frequently delivered BazaLoader and IcedID in past campaigns.
Tools
The tools and malware families the sources tie to it.
- Archelaus Beta
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de