TA579 — Ransomware Profile
TA579, a threat actor that Proofpoint researchers have been tracking since August 2021. This actor frequently delivered BazaLoader and IcedID in past campaigns.Tools & malware
- win.bumblebee Backdoor
Vendor research
- Latrodectus Malware Analysis: IcedID 2.0 Proofpoint
- Emerging Threats: Buzz of the Bumblebee – A new malicious loader Logpoint Security Research (now Guardsix)
- Security Brief: Bumblebee Buzzes Back in Black Proofpoint
- This isn't Optimus Prime's Bumblebee but it's Still Transforming Proofpoint