Skip to content
CybercrimeFinancialAdvanced sophistication · Organisation

TA542

TA542 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 8 sectors, including Government and Technology, in 3 countries, including the United States and the United Kingdom. It uses 2 MITRE ATT&CK techniques.

Also known as
  • Mummy Spider
  • ATK 104
  • Mealybug
  • Gold Crestwood
  • Emotet Group
Techniques
2
Exploited CVEs
No CVE data
First seen
Jan 1, 2014
Record updated

Who They Target.

Labelsbdef-qf:latestglobal

How They Operate · MITRE ATT&CK.

2 techniques across 1 of 14 tactics

Reconnaissance·

Resource Development·

Initial Access2

T1566.001
Phishing: Spearphishing Attachment
T1566.002
Phishing: Spearphishing Link

Execution·

Persistence·

Privilege Escalation·

Defense Evasion·

Credential Access·

Discovery·

Lateral Movement·

Collection·

Command and Control·

Exfiltration·

Impact·

Arsenal · Malware And Tools.

  • BlackCatmalware
  • Emotetmalware
  • Quantum Lockermalware

Last updated Nov 3, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.