Farnetworkit

Malware updated a month ago (2024-11-29T13:49:23.392Z)
Download STIX
Preview STIX
Farnetworkit, a malicious software or malware, has been active since 2019 under various aliases such as farnetworkl, jingo, jsworm, razvrat, piparkuka, and farnetwork. This cybercriminal entity has been involved in several ransomware projects including JSWORM, Karma, Nemty, and Nefilim. Farnetworkit's activities have not only been limited to the development of these ransomwares but also managing the Ransomware-as-a-Service (RaaS) programs for these projects. In 2022, they launched their own RaaS program based on the Nokoyawa ransomware. The threat actor behind farnetworkit is of significant renown within the cybercrime community, possessing its own botnet infrastructure used for compromising high-profile victims. This individual or group operates under multiple aliases, which include farnetworkl, jingo, jsworm, razvrat, piparkuka, and farnetworkit. The breadth and impact of their activities have positioned them as a formidable force in the cybersecurity landscape. Group-IB, a leading cybersecurity firm, has confirmed in a new report that "farnetwork" has been operating since at least 2019. They also operate on underground sites using the aforementioned aliases. This extensive history and continued activity highlight the ongoing threat posed by farnetworkit to digital security and data integrity.
Description last updated: 2023-11-29T07:49:14.396Z
What's your take? (Question 1 of 1)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at. Create a free account to see the source evidence for each alias, and help fix any errors.
Alias DescriptionVotes
Jsworm is a possible alias for Farnetworkit. JSWorm is a type of malware, specifically ransomware, that was active from 2019 to 2021. This malicious software was developed and operated by a threat actor known as 'farnetwork', who has used various aliases including farnetworkl, jingo, jsworm, razvrat, piparkuka, and farnetworkit. Farnetwork gai
3
Farnetwork is a possible alias for Farnetworkit. Farnetwork, a notorious malware operator identified by cybersecurity researchers from Group-IB, has been active in the cybercrime scene since 2019. Known for deploying five different strains of ransomware, including its proprietary strain Nokoyawa, Farnetwork has collaborated with other cybercrimina
2
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the Farnetworkit Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more