TA555 is a financially motivated threat actor group that emerged in May 2018, initially observed deploying the AdvisorsBot downloader. The group is known for its adaptable techniques and extensive use of social engineering, primarily conducting large-scale email campaigns to distribute various forms of malware, including banking trojans and ransomware. Over time, TA555 has evolved its operational model, shifting towards more targeted spear-phishing attacks and incorporating fileless malware to evade detection. While the group's origin remains unknown, its defining characteristic is its consistent deployment of novel and frequently updated malware, which it leverages for financial gain.

Aliases del actor

APT TA555AdvisorsBotPoshAdvisorotros relacionados con empleados de hotelesrestaurantesreclutadores en telecomunicacionesactividades criminales

Actores similares

apt-ta555actor · 1apt-desertfalconactor · 1apt-stealthfalconactor · 1apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1