Home / Threat actors / TA551
TA551 G0127
Also known as: GOLD CABIN, Shathak
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
14
Techniques
5
Malware and tools
TA551 is a financially-motivated threat group that has been active since at least 2018. The group has primarily targeted English, German, Italian, and Japanese speakers through email-based malware distribution campaigns.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Reconnaissance
T1589.002 Email Addresses Initial Access
T1566.001 Spearphishing Attachment Execution
T1059.003 Windows Command ShellT1204.002 Malicious File Stealth
T1027.003 SteganographyT1027.010 Command ObfuscationT1036 MasqueradingT1218.005 MshtaT1218.010 Regsvr32T1218.011 Rundll32 Command and Control
T1071.001 Web ProtocolsT1105 Ingress Tool TransferT1132.001 Standard EncodingT1568.002 Domain Generation Algorithms © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.