TA2723
TA2723 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 2 MITRE ATT&CK techniques.
- Techniques
- 2
- Exploited CVEs
- No CVE data
- First seen
- Dec 20, 2025
- Last seen
- Dec 20, 2025
- Record updated
About TA2723.
Financially motivated cybercriminal group known for high-volume credential phishing operations, previously spoofing services like Microsoft OneDrive, LinkedIn, and DocuSign. Adopted OAuth device code phishing in October.
Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.