TA499
Aliases: Vovan, Lexus
- First seen
- 2021-01-01 00:00:00
- Primary motivation
- notoriety
- Sophistication
- intermediate
- Resource level
- team
- Actor type
- nation-state
- Profile updated
- 2026-07-07 12:06:41
Targeted industries: government-and-public-sector media-and-entertainment technology-and-telecommunications
Targeted regions: country_code:us country_code:ca country_code:gb country_code:de
Context
TA499, also known as Vovan and Lexus, is a Russia-aligned threat actor that has aggressively engaged in email campaigns since at least 2021. The threat actor’s campaigns attempt to convince high-profile North American and European government officials as well as CEOs of prominent companies and celebrities into participating in recorded phone calls or video chats.
Reports & references
- proofpoint.com — Dont Answer Russia Aligned Ta499 Beleaguers Targets Video Call Requests (report)