TA446
TA446 is a Russia-attributed nation-state APT group with an ideological motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 8 countries, including the United States and the United Kingdom. It uses 70 MITRE ATT&CK techniques and exploits 6 known CVEs.
- Seaborgium
- Callisto
- Callisto Group
- UNC4057
- Blue Callisto
- BlueCharlie (TAG-53)
- Dancing Salome
- Gossamer Bear
- Origin
- Russia
- Techniques
- 70
- Exploited CVEs
- 6
- First seen
- Oct 4, 2024
- Last seen
- Sep 25, 2025
- Record updated
Who They Target.
About TA446.
COLDRIVER is a state-sponsored threat group linked to Russia, active since at least 2012 and believed to be affiliated with Center 18 of the Russian Federal Security Service (FSB). The group conducts sophisticated spear-phishing campaigns for credential theft and information exfiltration.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.