BTCintel
nodeok
mempool77,729 tx
node next1.01 sat/vB
retarget33 blocks
chainmainnet

threat actor

TA547

unknownentity:threat_actor

TA547 is responsible for many other campaigns since at least November 2017. The other campaigns by the actor were often localized to countries such as Australia, Germany, the United Kingdom, and Italy. Delivered malware included ZLoader (a.k.a. Terdot), Gootkit, Ursnif, Corebot, Panda Banker, Atmos, Mazar Bot, and Red Alert Android malware.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id
ta547
kind
threat actor
status
unknown
aliases
—
jurisdictions
—
claims naming it
0 · 0 attributions · 0 relations · 0 events

Identifiers

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.