Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

TA4903

TA4903 is a threat actor group, tracked by Brandefense. It targets 5 sectors, including Manufacturing and Finance, in the United States.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2021
Last seen
Mar 1, 2024
Record updated

Who They Target.

Sectors · 5
Countries · 1

Arsenal · Malware And Tools.

  • EvilProxymalware

About TA4903.

TA4903 is a financially motivated threat actor known for conducting credential phishing and business email compromise campaigns. They target organizations in the U.S. across various sectors, spoofing government entities and private businesses. The actor has been observed using techniques such as QR codes in phishing campaigns and spoofing supplier domains to prompt victims to provide banking information. TA4903's activities typically involve stealing corporate credentials to facilitate follow-on BEC activities.

Last updated Oct 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.