Threat actor · all actors
TA551G0127 unknown
aka TA551, GOLD CABIN, Shathak, Shakthak, ATK236, G0127, Monster Libra
Last updated: 2026-07-03
0attributed CVEs
23ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[TA551](https://attack.mitre.org/groups/G0127) is a financially-motivated threat group that has been active since at least 2018. (Citation: Secureworks GOLD CABIN) The group has primarily targeted English, German, Italian, and Japanese speakers through email-based malware distribution campaigns. (Citation: Unit 42 TA551 Jan 2021)
Source: MITRE ATT&CK
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
SI-4 | 20 / 23 | 87% |
SI-3 | 18 / 23 | 78% |
CA-7 | 16 / 23 | 70% |
CM-6 | 16 / 23 | 70% |
CM-2 | 15 / 23 | 65% |
AC-4 | 12 / 23 | 52% |
SC-7 | 12 / 23 | 52% |
CM-7 | 10 / 23 | 43% |
SI-10 | 10 / 23 | 43% |
SI-7 | 10 / 23 | 43% |
SC-20 | 6 / 23 | 26% |
AC-3 | 5 / 23 | 22% |
SI-2 | 5 / 23 | 22% |
AC-2 | 4 / 23 | 17% |
AC-6 | 4 / 23 | 17% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- Water Curupira Pikabot Distribution 0.42
- LazyScripter 0.36
- Rancor 0.34
- APT19 0.34
- Nomadic Octopus 0.31