TA473

Reported Context (2)

The article identifies TA473 as an alternate name for Winter Vivern and discusses its prior use of Zimbra XSS and JavaScript credential stealers. Seqrite Details Operation GhostMail Zimbra XSS Campaign Targeting Ukrainian Agency
Proofpoint reports that TA473 sent phishing emails to government organizations in Europe and the Middle East; the article describes the actor as Belarus-aligned. Iran Conflict Drives Espionage Campaigns Targeting Middle East Entities

CVE (1)

Malware (1)

Threat Actors (15)

MITRE ATT&CK (22)

Vendors (3)

Products (5)

Tools (2)

Industries (3)

Countries (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.