APT Explorer

All actors

TA577

Also reported as Hive0118. Linked to Russia by two sources.

Reports
36
Last reported
Known CVEs
8
Techniques in ATT&CK
6
Origin
Russia
ID
G1037
Sources
ATT&CKMISPMalpedia
Merge evidence
3 alias matches

Reports per quarter

Dated reports, 2014 Q4 to 2026 Q2.

Techniques in ATT&CK

Listed by ATT&CK

No report from the last two years names a technique ID.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Ransomware Attackers Partnering With Cybercrime Groups to Hack High-Profile Targets

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. Ransomware criminals look to other hackers to provide them with network access

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. Unit42-timely-threat-intel/2024-06-25-IOCs-from-Latrodectus-activity.txt at main · PaloAltoNetworks/Unit42-timely-threat-intel

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. Qbot - Red Canary Threat Detection Report

    date ORKL added it ORKL

    Archived copy on ORKL Details

  5. Strela Stealer Today's Invoice Tomorrow’s Phish

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  6. Unit42-timely-threat-intel/2025-01-17-IOCs-for-infrastructure-used-by-affiliate-of-Dark-Scorpius.txt at main · PaloAltoNetworks/Unit42-timely-threat-intel

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  7. it didn't turn into a truck, but a widely spread Android botnet

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. Virus Bulletin :: TA577 walked just past you: indirect syscalls in Pikabot

    Malpedia library date ORKL

    Archived copy on ORKL Details

  9. Latrodectus Rapid Evolution Continues With Latest New Payload Features

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. Die rasante Evolution von Latrodectus geht mit den neuesten neuen Nutzlastfunktionen weiter

    Malpedia library date ORKL

    Archived copy on ORKL Details

Show all 36 reports Show fewer

  1. Hive0137 on AI journey

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  2. Latrodectus, are you coming back? | Bitsight

    Malpedia library date ORKL

    Archived copy on ORKL Details

  3. PikaBot: a Guide to its Deep Secrets and Operations

    Malpedia library date ORKL

    Archived copy on ORKL Details

  4. Latrodectus – Malware Trends Tracker by ANY.RUN

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. TLP-CLEAR-Matanbuchus-Co-Code-Emulation-and-Cybercrime-Infrastructure-Discovery-1.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  6. Unit42-timely-threat-intel/2024-04-15-IOC-for-Contact-Forms-campaign-SSLoad-activity.txt at main · PaloAltoNetworks/Unit42-timely-threat-intel

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. Latrodectus Malware Analysis: IcedID 2.0 | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. Spam trends campaigns senior superlatives 2023

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  9. Bumblebee Malware Attack Analysis: Why It’s Back | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. logpoint-etpr-pikabot.pdf

    file creation date ORKL

    The original link failed its last check. Original publisher Details

  11. Q4%202023%20Botnet%20Threat%20Update.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  12. 2023 Adversary Infrastructure Report

    Malpedia library date ORKL

    Archived copy on ORKL Details

  13. [QuickNote] Technical Analysis of recent Pikabot Core Module

    Malpedia library date ORKL

    Archived copy on ORKL Details

  14. PikaBot distributed via malicious search ads

    Malpedia library date ORKL

    Archived copy on ORKL Details

  15. DarkGate Internals

    Malpedia library date ORKL

    Archived copy on ORKL Details

  16. The Human Factor 2023

    file creation date ORKL

    Archived copy on ORKL Details

  17. IcedID - FIRST AMS 2023

    Malpedia library date ORKL

    Archived copy on ORKL Details

  18. Fork in the Ice: IcedID Malware Analysis | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  19. Fork in the Ice- The New Era of IcedID

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  20. ITG23 Crypters Highlight Cooperation Between Cybercriminal Groups

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  21. Conti Affiliate Exposed- New Domain Names, IP Addresses and Email Addresses Uncovered

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  22. Conti Affiliate Exposed: New Domain Names, IP Addresses and Email Addresses Uncovered by eSentire

    Malpedia library date ORKL

    Archived copy on ORKL Details

  23. 2021 Adversary Infrastructure Report

    Malpedia library date ORKL

    Archived copy on ORKL Details

  24. How Initial Access Brokers Lead to Ransomware | Proofpoint US

    Malpedia library date ORKL

    Archived copy on ORKL Details

  25. The First Step- Initial Access Leads to Ransomware

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  26. Strela Stealer Today's Invoice Tomorrow’s Phish

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.