0attributed CVEs
7ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[TA578](https://attack.mitre.org/groups/G1038) is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including [Latrodectus](https://attack.mitre.org/software/S1160), [IcedID](https://attack.mitre.org/software/S0483), and [Bumblebee](https://attack.mitre.org/software/S1039).(Citation: Latrodectus APR 2024)(Citation: Bitsight Latrodectus June 2024)
Source: MITRE ATT&CK
Names & naming systems
Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.
MITRE ATT&CKG-number catalogue id
G1038
ProofpointTA threat-actor id
TA578
How we know this
- Data origin
- MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
- Techniques
- MITRE ATT&CK STIX mappings — 7 ATT&CK techniques on file.
- Named victims
- None on file.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
CA-7 | 4 / 7 | 57% |
CM-2 | 4 / 7 | 57% |
CM-6 | 4 / 7 | 57% |
CM-7 | 4 / 7 | 57% |
SI-3 | 4 / 7 | 57% |
SI-4 | 4 / 7 | 57% |
SI-10 | 3 / 7 | 43% |
SI-2 | 3 / 7 | 43% |
SI-7 | 3 / 7 | 43% |
AC-17 | 2 / 7 | 29% |
AC-2 | 2 / 7 | 29% |
AC-3 | 2 / 7 | 29% |
AC-4 | 2 / 7 | 29% |
AC-6 | 2 / 7 | 29% |
CM-8 | 2 / 7 | 29% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- TA577 0.29
- APT17 0.25
- C0011 0.24
- Water Curupira Pikabot Distribution 0.24
- Saint Bear 0.22