TA575

MISP

Type:
Unknown

Country:
Unknown

First seen:
Unknown

Details:

TA575 is a Dridex affiliate tracked by Proofpoint since late 2020. This group distributes malware such as Dridex, Qakbot, and WastedLocker via malicious URLs, Office attachments, and password-protected files. On average, TA575 distributes almost 4,000 messages per campaign impacting hundreds of organizations.

References (4)

blogs.blackberry.com - Blackberry Prevents Threat Actor Group Ta575 And Dridex Malware
proofpoint.com - Ta575 Uses Squid Game Lures Distribute Dridex Malware
zdnet.com - Ta575 Criminal Group Using Squid Game Lures For Dridex Malware
proofpoint.com - First Step Initial Access Leads Ransomware

Metadata

ID:	407
Created:	13/01/2026 17:48
Updated:	02/05/2026 04:00