[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffAKrfXp76Xy5Y9JE_Ep4IvVw3M6sQLfF_1jTVZkMq8o":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":11,"country":12,"suspected_sponsor":12,"target_industries":13,"target_countries":14,"incident_types":15,"references":16,"techniques":18,"technique_count":19,"created_at":20,"seoMetadata":21,"schemaOrg":25},"GOLD PRELUDE","gold-prelude",[9,10],"TA569","UNC1543","GOLD PRELUDE is a financially motivated cybercriminal threat group that operates the SocGholish (aka FAKEUPDATES) malware distribution network. GOLD PRELUDE operates a large global network of compromised websites, frequently running vulnerable content management systems (CMS), that redirect into a malicious traffic distribution system (TDS). The TDS, which researchers at Avast have named Parrot TDS, uses opaque criteria to select victims to serve a fake browser update page. These pages, which are customized to the specific visiting browser software, download the JavaScript-based SocGholish payload frequently embedded within a compressed archive.",null,[],[],[],[17],"https:\u002F\u002Fwww.secureworks.com\u002Fresearch\u002Fthreat-profiles\u002Fgold-prelude",[],0,"2023-08-09T17:25:09.409843+00:00",{"title":22,"metaDescription":23,"keywords":24},"GOLD PRELUDE Threat Actor Profile | EdgeProtect","GOLD PRELUDE is a financially motivated cybercriminal threat group that operates the SocGholish (aka FAKEUPDATES) malware distribution network. GOLD P...","GOLD PRELUDE, TA569, UNC1543, threat actor, APT, cyber threat, threat intelligence",{"@context":26,"@type":27,"name":6,"alternateName":28,"description":11,"url":29,"mainEntityOfPage":30},"https:\u002F\u002Fschema.org","Organization",[9,10],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fgold-prelude",{"@type":31,"@id":29},"WebPage"]