Cyntari
Beta
All threat actors

TAG-157

Alert me

A financially motivated phishing cluster also known as RefBroker that impersonates Booking.com and related services. Its infrastructure resembles TAG161 activity, but public reporting has not established that the two clusters are operated by the same people.

Create a free account to see the reports

Sign in or create a free account to see every report that names TAG-157.

Create free account