TA402 is a threat actor attributed to PS. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does TA402 exploit?

Specific CVE exploitation data for TA402 is being tracked. Check the Strobes VI threat actor profile for updates.

TA402

Exploited CVEs

Overview

TA402 is an APT group that has been tracked by Proofpoint since 2020. They primarily target government entities in the Middle East and North Africa, with a focus on intelligence collection. TA402 is known for using sophisticated phishing campaigns and constantly updating their malware implants and delivery methods to evade detection. They have been observed using cloud services like Dropbox and Google Drive for hosting malicious payloads and command-and-control infrastructure.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database