coldbraid

TA577

TA577 is an initial access broker (IAB) that has distributed QakBot and Pikabot, and was among the first observed groups distributing Latrodectus in 2023.

ATT&CK ID
G1037
Techniques
5
Tools
3

Techniques

Resource Development

Compromise Accounts

Initial Access

Phishing

Execution

Command and Scripting InterpreterUser Execution

Stealth

Obfuscated Files or Information

Software

Latrodectus · Pikabot · QakBot