TA551
TA551 is a Russia-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 5 sectors, including Manufacturing and Finance, in 5 countries, including the United States and the United Kingdom. It uses 33 MITRE ATT&CK techniques.
Also known as
- GOLD CABIN
- Shathak
- Monster Libra
- G0127
- Origin
- Russia
- Techniques
- 33
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2018
- Last seen
- Apr 15, 2021
- Record updated
Who They Target.
Labelsbdef-qf:latest
About TA551.
TA551 is a financially-motivated threat group that has been active since at least 2018. The group has primarily targeted English, German, Italian, and Japanese speakers through email-based malware distribution campaigns.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.