Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

TA2536

TA2536 is a Nigeria-attributed threat actor group, tracked by Brandefense.

Request IOC feedRequest ATT&CK export
Origin
Nigeria
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2015
Record updated

About TA2536.

TA2536, which has been active since at least 2015, is likely Nigerian based on its unique linguistic style, tactics and tools. It uses keyloggers such as HawkEye and distinctive stylometric features in typo-squatted domains that resemble legitimate names and the use of recurring names and substrings in email addresses.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.