Infrastructure d'attaque du groupe cybercriminel TA505

ID: 893c52c2-88b2-4a91-aeca-f4cadfd113e6

STIX ID: report--893c52c2-88b2-4a91-aeca-f4cadfd113e6

Threat Score

75/100

Uploaded: 2026-07-30

Published Date: 2026-07-30

Last Modified Date: 2026-08-06

Created by: dogesec

TLP:CLEAR

ADMIRALTY:A1

...

ANSSI analysis of TA505 (Aug 2019–Feb 2021) detailing the phishing-to-downloader (Get2) to RAT (SDBbot) infection chain, documented links to Clop ransomware, enumeration of four server roles and hundreds of IOCs (domains, IPs, ASes), usage of bulletproof hosting and commodity tools (Metasploit, Cobalt Strike), plus detection and mitigation guidance.