Skip to content
CybercrimeFinancialIntermediate sophistication

TA2723

TA2723 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 2 MITRE ATT&CK techniques.

Techniques
2
Exploited CVEs
No CVE data
First seen
Dec 20, 2025
Last seen
Dec 20, 2025
Record updated

About TA2723.

Financially motivated cybercriminal group known for high-volume credential phishing operations, previously spoofing services like Microsoft OneDrive, LinkedIn, and DocuSign. Adopted OAuth device code phishing in October.

Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.