← Back to all threat actors

TA551

Also known as GOLD CABIN, Shathak
Tracked as G0127

TA551 is a financially-motivated threat group that has been active since at least 2018. The group has primarily targeted English, German, Italian, and Japanese speakers through email-based malware distribution campaigns.

How we source and review actor profiles
Motivation
cybercrime
Status
Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

Cataloged
IdentityAlias: GOLD CABIN

Reviewed identity mapping approved on this date.

Cataloged
IdentityAlias: Shathak

Reviewed identity mapping approved on this date.

Cataloged
IdentityTracking identifier: G0127

Reviewed identity mapping approved on this date.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

TA551Canonical Name
GOLD CABINAlias
ShathakAlias
G0127Tracking Id

Loading CVEs, techniques, indicators, malware, victims, and activity...