TA402, also known by aliases such as Molerats and Gaza Cybergang, is a politically motivated cyber espionage group that emerged as early as October 2011. This group is assessed to be of Middle Eastern origin, specifically associated with the Palestinian territories, and its primary motivation is intelligence gathering and data exfiltration. TA402 distinguishes itself through its consistent focus on geopolitical events in the Middle East as lure themes and its rapid adaptation of attack methods and malware, including frequent retooling of custom backdoors and shifting delivery mechanisms to evade detection. The group is often associated with and sometimes confused with other Middle Eastern threat actors like APT-C-23 (Arid Viper) and WIRTE due to tactical overlaps and the complex nature of the regional threat landscape.

Aliases del actor

ta402