Skip to content

TA551

TA551 is a financially-motivated threat group that has been active since at least 2018. The group has primarily targeted English, German, Italian, and Japanese speakers through email-based malware distribution campaigns.

ATT&CK ID: G0127
Techniques: 11
Tools: 5

Also tracked as GOLD CABIN · Shathak

Techniques

Reconnaissance

Gather Victim Identity Information

Initial Access

Execution

Command and Scripting Interpreter User Execution

Stealth

Obfuscated Files or Information Masquerading System Binary Proxy Execution

Command and Control

Application Layer Protocol Ingress Tool Transfer Data Encoding Dynamic Resolution

Software

IcedID · QakBot · Sliver · Ursnif · Valak

MITRE ATT&CK All threat actors