All actors

TA579

Reports
58
Last reported
Known CVEs
7
ID
ta579
Sources
MISPMalpedia
Merge evidence
1 alias match

Reports per quarter

  1. 2021 Q3: 2 reports
  2. 2021 Q4: no reports
  3. 2022 Q1: 1 report
  4. 2022 Q2: 18 reports
  5. 2022 Q3: 10 reports
  6. 2022 Q4: 5 reports
  7. 2023 Q1: 5 reports
  8. 2023 Q2: 4 reports
  9. 2023 Q3: 4 reports
  10. 2023 Q4: no reports
  11. 2024 Q1: 1 report
  12. 2024 Q2: 1 report
  13. 2024 Q3: no reports
  14. 2024 Q4: 1 report
  15. 2025 Q1: no reports
  16. 2025 Q2: 2 reports
  17. 2025 Q3: 1 report
  18. 2025 Q4: no reports
  19. 2026 Q1: no reports
  20. 2026 Q2: 3 reports
Dated reports, 2021 Q3 to 2026 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. BumbleBee (Malware Family)

    date ORKL added it fromORKL

Show all 58 reports Show fewer
  1. BumbleBee: Round Two

    publisher's date The DFIR Report fromORKLDFIR Report

Newest first. Details opens the report in Explore.