APT / THREAT GROUP

TA406

🇰🇵North Korea-attributed
1
campaigns
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

TA406 is engaging in malware distribution, phishing, intelligence collection, and cryptocurrency theft, resulting in a wide range of criminal activities.

Threat Analysis

TA406 is a known-sophistication threat actor attributed to North Korea, engaged in cyber operations with a primary motivation of unknown activity patterns.

Known Campaigns

TA406 — Active Operations March 2026

TA406 is a unknown-motivation threat actor attributed to North Korea. TA406 is engaging in malware distribution, phishing, intelligence collection, and cryptocurrency theft, resulting in a wide range of criminal activities....

ACTIVEMEDIUM2026

External References

Quick Facts

TypeAPT / Threat Group
Origin🇰🇵 North Korea
Aliases1
SourceMalpedia

Also Known As

TA406

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
TA406 — APT / Threat Group | Threat Intelligence | CTIWATCH.COM