coldbraid

TA578

TA578 is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including Latrodectus, IcedID, and Bumblebee.

ATT&CK ID
G1038
Techniques
4
Tools
3

Techniques

Reconnaissance

Search Victim-Owned Websites

Resource Development

Acquire Infrastructure

Execution

Command and Scripting InterpreterUser Execution

Software

Bumblebee · IcedID · Latrodectus