TA2541

Reports per quarter

Techniques in ATT&CK

Listed by ATT&CK

• T1016.001
• T1027.002
• T1027.013
• T1027.015
• T1036.005
• T1047
• T1053.005
• T1055
• T1055.012
• T1059.001
• T1059.005
• T1082

No report from the last two years names a technique ID.

Reports

1. 6 April 2026

   Snip3, una investigación sobre malware

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Snip3, una investigación sobre malware

2. 6 April 2026

   Operation Layover: How we tracked an attack on the aviation industry to five years of compromise

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Operation Layover: How we tracked an attack on the aviation industry to five years of compromise

3. 6 April 2026

   AsyncRAT (Malware Family)

   date ORKL added it fromORKL

   The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor AsyncRAT (Malware Family)

4. 6 April 2026

   Dissecting a NETWIRE Phishing Campaign's Usage of Process Hollowing | Mandiant

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Dissecting a NETWIRE Phishing Campaign's Usage of Process Hollowing | Mandiant

5. 7 June 2023

   The Human Factor 2023

   file creation date fromORKL

   Archived copy on ORKL Detailsfor The Human Factor 2023

6. 16 August 2022

   AsyncRAT C2 Framework- Overview, Technical Analysis & Detection

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor AsyncRAT C2 Framework- Overview, Technical Analysis & Detection

7. 16 August 2022

   AsyncRAT C2 Framework: Overview, Technical Analysis & Detection

   Malpedia library date fromORKL

   The original link failed its last check. Original publisher Detailsfor AsyncRAT C2 Framework: Overview, Technical Analysis & Detection

8. 15 February 2022

   TA2541- APT Has Been Shooting RATs at Aviation for Years

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TA2541- APT Has Been Shooting RATs at Aviation for Years

9. 15 February 2022

   Unskilled hacker linked to years of attacks on aviation, transport sectors

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Unskilled hacker linked to years of attacks on aviation, transport sectors

10. 15 February 2022

    Charting TA2541's Flight

    date in the title fromORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Charting TA2541's Flight

Newest first. Details opens the report in Explore.