TA2541
TA2541 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 8 sectors, including Government and Technology, in 4 countries, including the United States and Japan. It uses 30 MITRE ATT&CK techniques and exploits 1 known CVE.
- Techniques
- 30
- Exploited CVEs
- 1
- First seen
- Jan 1, 2017
- Last seen
- Feb 15, 2022
- Record updated
Who They Target.
About TA2541.
TA2541 is a cybercriminal group that has been targeting the aviation, aerospace, transportation, manufacturing, and defense industries since at least 2017. TA2541 campaigns are typically high volume and involve the use of commodity remote access tools obfuscated by crypters and themes related to aviation, transportation, and travel.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.