APT
ATLAS
Atlas
Actors
147
Names
508
Sectors
40
Requirements
480
⌘K
▸
sign in
Atlas
Actors
147
Names
508
Sectors
40
Requirements
480
LOADING
TA551 (aka Shathak, Gold Cabin) · APT Atlas
Actors
/
Cybercrime
/
Unattributed
TA551
G0127
CRIME
?? · Unattributed
AKA
Shathak · Gold Cabin
Mandiant
:
UNC2420
MITRE
:
G0127
Targets
0
Sectors
0
Threat types
2
GIRs covered
0/480
Active since
2018
Pin to atlas
Watch
Share
Export
Also tracked as
3 vendor names · 2 other aliases
Open Rosetta Stone
Mandiant
UNC2420
MITRE
G0127
Proofpoint
TA551
UNATTRIBUTED ALIASES
Shathak
Gold Cabin
Victimology
Geographic footprint · 0 countries
Region filter
Export
origin · unattributed
targeted countries · 0
No targets recorded for this actor.
Sectors targeted
0 of 40
No sectors targeted yet for this actor.
Tactics, techniques, procedures
Threat types + MITRE ATT&CK mapping
THREAT TYPES
FIN · Financial Fraud
RAN · Ransomware
MITRE ATT&CK · 11 techniques
Reconnaissance
· 1
T1589.002
Email Addresses
Initial Access
· 1
T1566.001
Spearphishing Attachment
Execution
· 1
T1059.003
Windows Command Shell
Command And Control
· 2
T1071.001
Web Protocols
Stealth
· 6
T1027.003
Steganography
GIR coverage
0 / 480 requirements satisfied
Open matrix
No GIRs mapped yet for this actor.
Open data
Machine-readable exports of this profile
JSON · REST
Actor record
Full profile via the public v1 API
STIX 2.1
Intrusion-set bundle
Deterministic ids · techniques + targeted countries
ATT&CK NAVIGATOR
Technique layer
11 techniques · layer format 4.5
Related actors
By origin and actor type
Scattered Spider
cybercrime
United States · 3 targets · since 2022
FIN10
cybercrime
unattributed · 1 targets · since 2013
FIN2
cybercrime
unattributed · 0 targets · since —
FIN6
cybercrime
Russia · 15 targets · since 2014
APT73
nation-state
unattributed · 0 targets · since —
UNC1543
cybercrime
unattributed · 22 targets · since —
T1105
Ingress Tool Transfer
T1027.010
Command Obfuscation
T1036
Masquerading
T1218.005
Mshta
T1218.010
Regsvr32
T1218.011
Rundll32