TA577 — Ransomware Profile
TA577 is an initial access broker (IAB) that has distributed QakBot and Pikabot, and was among the first observed groups distributing Latrodectus in 2023.Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Also tracked as
Hive0118
Tools & malware
- Latrodectus Loader
- Pikabot Loader
- QakBot Banking Trojan
Vendor research
- Latrodectus: This Spider Bytes Like Ice Latrodectus