TA2536
Intelligence Profile
TA2536, which has been active since at least 2015, is likely Nigerian based on its unique linguistic style, tactics and tools. It uses keyloggers such as HawkEye and distinctive stylometric features in typo-squatted domains that resemble legitimate names and the use of recurring names and substrings in email addresses.
Threat Analysis
TA2536 is a known-sophistication threat actor attributed to Nigeria, engaged in cyber operations with a primary motivation of unknown activity patterns.
Known Campaigns
TA2536 is a unknown-motivation threat actor attributed to NG. TA2536, which has been active since at least 2015, is likely Nigerian based on its unique linguistic style, tactics and tools. It uses keyloggers such as HawkEye and distinctive stylometric features in typo-squatted domains that resemble legitimate names and the use of recurring ...