TA579
TA579, a threat actor that Proofpoint researchers have been tracking since August 2021. This actor frequently delivered BazaLoader and IcedID in past campaigns.
source: misp-galaxy1 refs →
TA579
TA579 targets financial sectors with phishing campaigns delivering BazaLoader and IcedID payloads.
Analyst brief
TA579 is a threat actor tracked by Proofpoint since August 2021. This actor primarily targets organizations in the financial and insurance sectors, among others. Their main TTPs involve phishing emails delivering BazaLoader and IcedID payloads in past campaigns. Defenders should focus on email security and reinforce detection for BazaLoader and IcedID-associated download chains.
unknown
FAQ2
Which sectors does TA579 primarily target?
TA579 primarily targets the financial and insurance sectors, as well as other organizations.
What payloads has TA579 delivered in past campaigns?
TA579 has delivered BazaLoader and IcedID payloads in past campaigns.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.