Threat Actor
TAG-217
- First Reported
- Oct 16, 2026
- Latest Reported
- Oct 16, 2026
Reported Context (1)
- Recorded Future's Insikt Group designation for the actor investigated in connection with attacks on South Korean financial institutions and earlier financially motivated activity. Recorded Future Traces TAG-217’s Preparations for South Korean Bank Attacks
Products (3)
Tools (4)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.