TA406TA406

TA406 is a North Korean-attributed threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). Operational targeting focuses on the Government, Journalists, and NGOs sectors. Documented victim organisations include China, France, Germany and 7 other named victims. Original record: TA406 is engaging in malware distribution, phishing, intelligence collection, and cryptocurrency theft, resulting in a wide range of criminal activities.