CVE Intelligence
Home / Threat actors / TA505

TA505 G0092

🔔 Create alert

Also known as: Hive0065, Spandex Tempest, CHIMBORAZO

Updated at source on Jul 31, 2026 · View on MITRE ATT&CK

0
associated CVEs
39
Techniques
16
Malware and tools

TA505 is a cyber criminal group that has been active since at least 2014. TA505 is known for frequently changing malware, driving global trends in criminal malware distribution, and ransomware campaigns involving Clop.

Ransomware operations linked to this group ransomware.live

clop via Clop

Exploited vulnerabilities

CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.

ATT&CK does not cite CVEs for this group.

Techniques by tactic

Resource Development
T1583.001 DomainsT1588.001 MalwareT1588.002 ToolT1608.001 Upload Malware
Initial Access
T1078.002 Domain AccountsT1566.001 Spearphishing AttachmentT1566.002 Spearphishing Link
Execution
T1059.001 PowerShellT1059.003 Windows Command ShellT1059.005 Visual BasicT1059.007 JavaScriptT1106 Native APIT1204.001 Malicious LinkT1204.002 Malicious FileT1559.002 Dynamic Data Exchange
Persistence
T1078.002 Domain AccountsT1112 Modify Registry
Privilege Escalation
T1055.001 Dynamic-link Library InjectionT1078.002 Domain Accounts
Stealth
T1027.002 Software PackingT1027.010 Command ObfuscationT1027.013 Encrypted/Encoded FileT1055.001 Dynamic-link Library InjectionT1078.002 Domain AccountsT1140 Deobfuscate/Decode Files or InformationT1218.007 MsiexecT1218.011 Rundll32
Defense Impairment
T1112 Modify RegistryT1553.002 Code SigningT1553.005 Mark-of-the-Web BypassT1685 Disable or Modify Tools
Credential Access
T1552.001 Credentials In FilesT1555.003 Credentials from Web Browsers
Discovery
T1069 Permission Groups DiscoveryT1087.003 Email Account
Command and Control
T1071.001 Web ProtocolsT1105 Ingress Tool TransferT1568.001 Fast Flux DNS
Impact
T1486 Data Encrypted for Impact

Malware and tools

© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.