Threat actor
TA569
financial
Tracked by CyberSIXT since 26 Nov 2025
- Articles · all time
- 1
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
Names and sources
- GOLD PRELUDE
- Named by CyberSIXT coverage
- GOLD PRELUDE
- Named by Malpedia · gold_prelude
- TA569
- Named by Malpedia · gold_prelude
- UNC1543
- Named by Malpedia · gold_prelude
- DEV-0206
- Named by Microsoft · Mustard Tempest
- INDRIK SPIDER
- Named by Microsoft · Mustard Tempest
- Mustard Tempest
- Named by Microsoft · Mustard Tempest
- GOLD PRELUDE
- Named by MISP Galaxy · 8134c96d-d6ed-49cc-99d6-fe74c0636387
All 16 names
- TA569
- Named by MISP Galaxy · 8134c96d-d6ed-49cc-99d6-fe74c0636387
- UNC1543
- Named by MISP Galaxy · 8134c96d-d6ed-49cc-99d6-fe74c0636387
- DEV-0206
- Named by MITRE ATT&CK® · G1020
- GOLD PRELUDE
- Named by MITRE ATT&CK® · G1020
- Mustard Tempest
- Named by MITRE ATT&CK® · G1020
- TA569
- Named by MITRE ATT&CK® · G1020
- UNC1543
- Named by MITRE ATT&CK® · G1020
- 8134c96d-d6ed-49cc-99d6-fe74c0636387
- Named by CyberSIXT coverage
Attributed facts
- category
- financial (Microsoft · Mustard Tempest)
- motivation
- financial (Microsoft · Mustard Tempest)
Malware and tools
MITRE ATT&CK® techniques
From MITRE ATT&CK® · G1020
Resource Development
Execution
- T1204.001
- Malicious Link
Stealth
- T1036.005
- Match Legitimate Resource Name or Location
Discovery
- T1082
- System Information Discovery
Command and Control
- T1105
- Ingress Tool Transfer
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. All techniques on MITRE ATT&CK
- Operation Endgame Takes Down SocGholish, Amadey, and StealC MalwareSecurityOnline
- GRU Unit 29155 Uses SocGholish to Target US FirmSecurityOnline · first in our coverage