TA577
TA577 is an initial access broker (IAB) that has distributed QakBot and Pikabot, and was among the first observed groups distributing Latrodectus in 2023.
Attribution signal
?Score = mentions × confidence weight, summed across all attributed sources. Higher source diversity increases the score.≥ 10 High≥ 3 Moderate< 3 Low0.1
Low signal strength
Mentions1
Sources0
High conf.0
Last seenJun 2026
First observed
2024-09-17
Last active
—
Origin
Unknown — financially motivated cybercriminal group
Aliases
1
Techniques
6
Campaigns
2
Attribution signals
1 mention · 0 sources#1experimented withunspecified
Unspecified
forensicitguy
Jun 2026
"In mid-February, TA577 experimented with a Java Archive (JAR) dropper to deliver Pikabot to their victims."
Hedge terms observed
experimented with