TA544 — APT Profile

TA544 (Narwhal Spider) is a prolific cybercriminal group distributing Ursnif and other banking trojans primarily targeting Italian and European organizations.

Also tracked as

Narwhal Spider, GOLD ESSEX, Storm-0302

Tools & malware

Chthonic Stealer
Dridex Stealer
Panda Banker Stealer
Smoke Loader Loader
URLZone Stealer
Ursnif Stealer
WikiLoader Loader
ZLoader Loader

Vendor research

Threat Actor Profile: TA544 targets geographies from Italy to Japan with a range of malware Proofpoint
Security Brief: TA544 Targets Italian Organizations with Ursnif Malware Proofpoint
Out of the Sandbox: WikiLoader Digs Sophisticated Evasion Proofpoint

Read the full analysis on IntelFusions