TA578 — Ransomware Profile
TA578 uses contact forms and email to initiate communications with victims and to distribute malware including Latrodectus, IcedID, and Bumblebee.Tools & malware
- Bumblebee Loader
- IcedID Banking Trojan
- Latrodectus Loader
- win.bumblebee Backdoor
- win.ssload Loader
Vendor research
- Latrodectus, are you coming back? Bitsight
- Latrodectus: This Spider Bytes Like Ice Latrodectus