TA505
TA505 is a cyber criminal group that has been active since at least 2014. TA505 is known for frequently changing malware, driving global trends in criminal malware distribution, and ransomware campaigns involving Clop.
Attribution signal
?Score = mentions × confidence weight, summed across all attributed sources. Higher source diversity increases the score.≥ 10 High≥ 3 Moderate< 3 Low0.0
None signal strength
Mentions0
Sources0
High conf.0
First observed
2019-05-28
Last active
—
Origin
Eastern Europe / Russia (cybercriminal)
Aliases
4
Techniques
34
Campaigns
0
Eastern Europe / Russia (cybercriminal)
Attribution signals
No attribution signals extracted yet — signals populate automatically as articles are processed.