Team46, also known by the alias TaxOff, is an advanced persistent threat (APT) group that first emerged in late 2024, with activity documented as early as the third quarter. Security researchers suggest a high probability that Team46 and TaxOff are the same entity, based on significant commonalities in their operational tools, infrastructure, and attack methodologies. This group's primary motivation is cyberespionage, aiming to compromise critical infrastructure and exfiltrate sensitive information from targeted organizations. A key differentiator for Team46 is its consistent reliance on zero-day vulnerabilities, such as CVE-2025-2783 in Google Chrome and CVE-2024-6473 in Yandex Browser, for initial system penetration and maintaining persistent access. They are also known for developing custom malware, including the Trinper backdoor, and utilizing multi-stage loaders with unique environmental guardrails like firmware UUIDs for payload decryption.

Aliases del actor

TaxOfftaxoffteam46

Actores similares

taxoffactor · 1