TA2541 — APT Profile
TA2541 is a cybercriminal group that has been targeting the aviation, aerospace, transportation, manufacturing, and defense industries since at least 2017. TA2541 campaigns are typically high volume and involve the use of commodity remote access tools obfuscated by crypters and themes related to aviation, transportation, and travel.Tools & malware
- Agent Tesla Infostealer
- AsyncRAT Remote Access Trojan
- Imminent Monitor Remote Access Trojan
- jRAT Remote Access Trojan
- NETWIRE Remote Access Trojan
- njRAT Remote Access Trojan
- Revenge RAT Remote Access Trojan
- Snip3 Loader
- WarzoneRAT Remote Access Trojan