Sponsor / State AffiliationIndependent / Not Attributed
Primary MotivationEspionage / Financial
Active TimelineUnknown – Present
Confidence Rating70% (Grounded)
TA406 is engaging in malware distribution, phishing, intelligence collection, and cryptocurrency theft, resulting in a wide range of criminal activities.