TA505

TA505 is a cyber criminal group that has been active since at least 2014. It is known for frequently changing malware, driving global trends in criminal malware distribution, and ransomware campaigns involving Clop. The group is also associated with the aliases Hive0065, Spandex Tempest, and CHIMBORAZO.