TA430

2024-01-01 • ProofpointNone

TA430 appears in a YARA rule identifier used to track the North Korea-associated HazyLoad proxy tool in memory. The cited rule detects proxy-related strings in HazyLoad and uses the label APT_NK_TA430_HazyLoad_Mem; the source does not otherwise define TA430 as a standalone actor.

Related Actors

First seen: Jul 2017
Last seen: Jun 2026

Related Reports

Top Authors

View all reports in this cluster

View all reports in this cluster