TA569
TA569 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 15 sectors, including Government and Technology, in 19 countries, including the United States and the United Kingdom. It uses 50 MITRE ATT&CK techniques.
Also known as
- DEV-0206
- GOLD PRELUDE
- UNC1543
- Techniques
- 50
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2017
- Last seen
- Nov 22, 2022
- Record updated
Who They Target.
Sectors · 15
Countries · 19
Labelsglobalinitial-access-broker
About TA569.
Mustard Tempest is an initial access broker that has operated the SocGholish distribution network since at least 2017. Mustard Tempest has partnered with Indrik Spider to provide access for the download of additional malware including LockBit, WastedLocker, and remote access tools.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.