Forensia CTI Core

Profile

TA578 is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including Latrodectus, IcedID, and Bumblebee.

MITRE ATT&CK ↗

Techniques

4 ATT&CK techniques attributed to this actor.

T1059.007 JavaScript T1204.001 Malicious Link T1583.006 Web Services T1594 Search Victim-Owned Websites

Software

3 malware/tools attributed to this actor.

IcedIDBumblebeeLatrodectus

Related corpus activity

6,187 indicators EXHIBIT techniques this actor uses. This is a shared-technique signal, not a first-party attribution to TA578.

Indicator	Type	Family	Sev	Src
cve-2026-1969	cve	—	85	1
cve-2025-7852	cve	—	85	1
cve-2025-7443	cve	—	85	1
cve-2026-3844	cve	—	85	1
cve-2021-29441	cve	—	85	1
cve-2025-12057	cve	—	85	1
cve-2026-0740	cve	—	85	1
cve-2025-34085	cve	—	85	1
86db2530298e6335d3ecc66c2818cfbd0a6b11fcdfcb75f575b9fcce1faa00f1	hash	—	80	1
62a879b0d1c1649cc72b2b6f61a8f6bd888625ce6e8a7aefe0a0461e4f27c525	sha256	phishing	80	2
7900c2772680523cadc9fe4e07300d45500191ba64ff5b91573531b133840b14	sha256	phishing	80	2
771a47120b935e218322046e838347d722d265b91f1afdef91194a5bec86a97a	sha256	phishing	80	2
7b297f18ece81e87608e158288cc9c06cb9f4a8f1b2d2256aecf7bba8d7be2ab	sha256	phishing	80	2
1fc0a876a121882ffaad6677f444cf5b	hash	—	80	1
f79d05065a2ba7937b8781e69b5859d78d5f65f01fb291ae27d28277a5e37f9b	hash	—	80	1
adcd15f3d6b87f84d106ea426fa824fd20c9d64f6d199ce92580884290785f30	sha256	phishing	80	1
23b37d2ebe683cec3b145b6f2234ee728b99228cf3774399fcfad9502daab9a9	sha256	phishing	80	2
7b7981c99d59595fe15377df84695bb72ce0b85560a3935f930657b2d162e5ef	sha256	phishing	80	1
d7d2f0ee187549f3f4a114d716be12521fbf62d6d26e2ac23d2a32d521d08fd8	sha256	phishing	80	1
50ebf107d522326c9a9db8821fe3263aa5136964faaf5dd183657bbb52725f84	sha256	phishing	80	2
5272917261d7091a59e00f9d09cd7eb1d3e111115a5b367f79a66d0d7c7b01f4	sha256	phishing	80	2
5115277eabf2d22d49dcef1e155874387d8e783853bd86debf7ff58588aae35d	sha256	phishing	80	2
248ded4723e9f5da793e5e42d1ba7c2293dd704718f149b84b3b9b818a1f51db	sha256	phishing	80	2
60972abf5425c191c81bae117f1dedaea13d39bc52f367d5dff9ad1aa4b9c5ca	sha256	phishing	80	2
669002654c264191d4660fbf757860d930175649735f81370b9f1af3658a304c	sha256	phishing	80	2
e5e43b0830369c39fab45363486da4d21a98c5097ea262c9816997f11c73c1c4	hash	phishing	80	2
7aa76237a7686583cc526b9d1a8486a52bd44a448d75ced51e1df4ba29ddb163	sha256	phishing	80	2
43d597783af656a35184021f5e20686896463a1712f9216e0217a2ca740e3935	sha256	phishing	80	2
e20b35a8c30e076cdd0e1df05ba1ff2e418dbd39a674f084787cc0af2fda9e95	sha256	phishing	80	1
3d510977d60a44322f88100b515f06cb5ed83babc64247068d1a489595faa6c5	sha256	phishing	80	1

Showing the top 30 by severity of 6,187.