TA2541
UnattributedNo public state or group attribution on record
TA2541 is a cybercriminal group that has been targeting the aviation, aerospace, transportation, manufacturing, and defense industries since at least 2017. TA2541 campaigns are typically high volume and involve the use of commodity remote access tools obfuscated by crypters and themes related to aviation, transportation, and travel.
MITRE ATT&CK Techniques
Associated Malware
Agent TeslaAsyncRATImminent MonitorNETWIRERevenge RATSnip3WarzoneRATjRATnjRAT
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.