← All Threat Actors
Threat Actor Profile

TA551

G0127 GOLD CABIN Hive0106 Mario Kart Shathak UNC2420
▲ High Threat
[TA551](https://attack.mitre.org/groups/G0127) is a financially-motivated threat group that has been active since at least 2018. (Citation: Secureworks GOLD CABIN) The group has primarily targeted English, German, Italian, and Japanese speakers through email-based malware distribution campaigns. (Citation: Unit 42 TA551 Jan 2021)
Origin

Known TTPs

Regsvr32
Email Addresses
Malicious File
Rundll32
Steganography
Spearphishing Attachment
Standard Encoding
Domain Generation Algorithms
Command Obfuscation
Web Protocols
Ingress Tool Transfer
Mshta
Windows Command Shell
Masquerading

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…

LINK COPIED TO CLIPBOARD