BTCintel
nodeok
mempool78,520 tx
node next1.01 sat/vB
retarget33 blocks
chainmainnet

threat actor

GOLD SYMPHONY

unknownentity:threat_actor

GOLD SYMPHONY is a financially motivated cybercrime group, likely based in Russia, that is responsible for the development and sale on underground forums of the Buer Loader malware. First discovered around August 2019, Buer Loader is offered as a malware-as-a-service (MasS) and has been advertised by a threat actor using the handle 'memeos'. Customers include GOLD BLACKBURN, the operators of the TrickBot malware. In addition to TrickBot, Buer Loader has been reported to download Cobalt Strike an

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id
gold-symphony
kind
threat actor
status
unknown
aliases
—
jurisdictions
—
claims naming it
0 · 0 attributions · 0 relations · 0 events

Identifiers

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.