H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeGroup
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[TA578](https://attack.mitre.org/groups/G1038) is a threat actor that has used contact forms and email to initiate communications with victims and to distribute malware including [Latrodectus](https://attack.mitre.org/software/S1160), [IcedID](https://attack.mitre.org/software/S0483), and [Bumblebee](https://attack.mitre.org/software/S1039).(Citation: Latrodectus APR 2024)(Citation: Bitsight Latrodectus June 2024)

7 recorded

Relationships

usesMalware
usesMalware
usesTechnique
usesMalware
usesTechnique
usesTechnique
3 external

References

mitre-attack
G1038
open
Bitsight Latrodectus June 2024
https://www.bitsight.com/blog/latrodectus-are-you-coming-back
open
Latrodectus APR 2024
https://www.proofpoint.com/us/blog/threat-insight/latrodectus-spider-bytes-ice
open