TA571 is a threat actor. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does TA571 exploit?

Specific CVE exploitation data for TA571 is being tracked. Check the Strobes VI threat actor profile for updates.

TA571

Exploited CVEs

Overview

TA571 is a spam distributor actor known for delivering a variety of malware, including DarkGate, NetSupport RAT, and information stealers. They use phishing emails with macro-enabled attachments to spread malicious PDFs containing rogue OneDrive links. TA571 has been observed using unique filtering techniques with intermediary "gates" to target specific users and bypass automated sandboxing. Proofpoint assesses with high confidence that TA571 infections can lead to ransomware.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database