TA406 is engaging in malware distribution, phishing, intelligence collection, and cryptocurrency theft, resulting in a wide range of criminal activities.
No exploited CVEs have been attributed to this threat actor yet.