Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

TA444

TA444 is a North Korea-attributed threat actor group, tracked by Brandefense.

Request IOC feedRequest ATT&CK export
Origin
North Korea
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2017
Record updated

About TA444.

TA444 is a North Korea state-sponsored threat actor that primarily focuses on financially motivated operations. They have been active since at least 2017 and have recently shifted their attention to targeting cryptocurrencies. TA444 employs various infection methods and has a diverse range of malware and backdoors at their disposal. They have been attributed to stealing hundreds of millions of dollars' worth of cryptocurrency and related assets.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.