TA547 — APT Profile

TA547 (Scully Spider) distributed NetSupport RAT and Rhadamanthys stealer, notably using AI-generated malware components in campaigns targeting European organizations.

Also tracked as

Scully Spider

Tools & malware

Adhubllka Ransomware
Lumma Stealer Information stealer
NetSupport RAT Remote access tool
Rhadamanthys Information stealer
StealC Information stealer
Ursnif Banking trojan
ZLoader Banking trojan / loader

Vendor research

Security Brief: TA547 Targets German Organizations with Rhadamanthys Stealer Proofpoint
Security Brief: TA547 Pivots from Ursnif Banking Trojan to Ransomware in Australian Campaign Proofpoint

Read the full analysis on IntelFusions