Researchers Expose TA585’s MonsterV2 Malware Capabilities and Attack Chain
Researchers in cybersecurity have provided insight on TA585, a hitherto unknown threat actor that has been seen using phishing attempts to distribute the commercial malware MonsterV2.
The threat activity cluster, which uses web injections and filtering checks as part of its attack chains, was characterized as sophisticated by the Proofpoint Threat Research Team.
According to researchers Kyle Cucci, Tommy Madjar, and Selena Larson, TA585 is noteworthy since it seems to control its whole assault chain with a variety of delivery methods. TA585 handles its own infrastructure, delivery, and malware installation rather than relying on other threat actors to do things like pay for distribution, purchase access from initial access brokers, or use a third-party traffic delivery system.
Mo...