D
CyberUnattributed

TA578

Cybercriminal groupTrackedPending verification
CyberUNK
Identification silhouette. Not drawn to scale between entries.
Fact cardConfidence · Source
System
TypeCybercriminal group
ProliferationOrigin country only
MITRE ATT&CK IDG1038High[1]
Capabilities
ATT&CK techniques used4ATT&CK v20.1High[1]
Malware and toolsBumblebee, IcedID, Latrodectus3 malware and tool entries linked in ATT&CKHigh[1]
Attribution and activity
Attributed sponsorMalware distributorMed[1]
Notes
TA578 is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including Latrodectus, IcedID, and Bumblebee. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.
Summary

TA578 is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including Latrodectus, IcedID, and Bumblebee.

Draft entry. Values come from the cited public sources and are awaiting editor verification.
CompareJSON
Operators
Sources
  1. TA578, Group G1038, MITRE ATT&CK
    Published/updated 2026-07-31 · Tier 2 · checked 2026-11-08
Change log
  • 2026-11-08 Entry created from MITRE ATT&CK Enterprise v20.1 (group G1038)