TA505
TA505 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 18 sectors, including Government and Technology, in 31 countries, including the United States and the United Kingdom. It uses 77 MITRE ATT&CK techniques and exploits 27 known CVEs.
Also known as
- Techniques
- 77
- Exploited CVEs
- 27
- First seen
- Jan 1, 2014
- Last seen
- Apr 13, 2021
- Record updated
Who They Target.
Sectors · 18
Countries · 31
About TA505.
TA505 is a cyber criminal group that has been active since at least 2014. TA505 is known for frequently changing malware, driving global trends in criminal malware distribution, and ransomware campaigns involving Clop.
Last updated Oct 6, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.