Skip to content
brandefense.io
Request A Demo
CybercrimeFinancial

TA547

TA547 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Finance sector in 16 countries, including the United States and the United Kingdom.

Also known as
  • Scully Spider
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2017
Record updated

Who They Target.

Sectors · 1
Countries · 16

About TA547.

TA547 is responsible for many other campaigns since at least November 2017. The other campaigns by the actor were often localized to countries such as Australia, Germany, the United Kingdom, and Italy. Delivered malware included ZLoader (a.k.a. Terdot), Gootkit, Ursnif, Corebot, Panda Banker, Atmos, Mazar Bot, and Red Alert Android malware.

Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.