← All Threat Actors
Threat Actor Profile

TA577

G1037 Hive0118
▲ High Threat
TA577 is a prolific cybercrime threat actor tracked by Proofpoint since mid-2020. This actor conducts broad targeting across various industries and geographies, and Proofpoint has observed TA577 deliver payloads including Qbot, IcedID, SystemBC, SmokeLoader, Ursnif, and Cobalt Strike.
Origin Russia

Known TTPs

JavaScript
Windows Command Shell
Embedded Payloads
Email Accounts
Malicious Link
Spearphishing Link

External Resources

CISA Advisories ↗

Related Intelligence

Hacking the mainframe…

LINK COPIED TO CLIPBOARD