Also known as: SectorJ04 Group, Spandex Tempest, GOLD TAHOE, Dudear, ATK103, GRACEFUL SPIDER, G0092, CHIMBORAZO, SectorJ04, Hive0065
TA505, the name given by Proofpoint, has been in the cybercrime business for at least four years. This is the group behind the infamous Dridex banking trojan and Locky ransomware, delivered through malicious email campaigns via Necurs botnet. Other malware associated with TA505 include Philadelphia and GlobeImposter ransomware families.
No exploited CVEs have been attributed to this threat actor yet.
Browse CVE Database