금융보안원

Profiling of TA505 Threat Group

That Continues to Attack the Financial Sector

(Follow the Trail of TA505)

Based on the information gathered by the Financial Security Institute for about a year, this report contains the TA505 threat group's tactics, techniques, procedures and recent trends.

• * TA505(Threat Actor 505) : The threat group that has attacked foreign financial institutions by using malwares, ransomwares and remote-controlled malwares since 2014.