TA406
- Origin
- KP
- Primary motivation
- financial-gain
- Sophistication
- advanced
- Resource level
- government
- Actor type
- nation-state
- Profile updated
- 2026-07-07 12:03:57
Targeted industries: financial-services government-and-public-sector media-and-entertainment
Context
TA406 is engaging in malware distribution, phishing, intelligence collection, and cryptocurrency theft, resulting in a wide range of criminal activities.
Related threat objects
- Kimsuky (threat-actor)
Reports & references
- proofpoint.com — Triple Threat North Korea Aligned Ta406 Scams Spies And Steals (report)
- proofpoint.com — Ta406 Pivots Front (report)