State-backedNorth Korea
TA406
0mentions, 7 days
0mentions, 30 days
nonelast mentioned
TA406 is engaging in malware distribution, phishing, intelligence collection, and cryptocurrency theft, resulting in a wide range of criminal activities.
Targets: Government, Journalists, NGOs, China, France, Germany, India, Japan, North America, Russia, South Africa, South Korea, United Kingdom
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
No posts or advisories have named this actor recently.
References
- https://www.proofpoint.com/us/blog/threat-insight/triple-threat-north-korea-aligned-ta406-scams-spies-and-steals
- https://www.proofpoint.com/us/blog/threat-insight/ta406-pivots-front
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.