Ghostsec

Malware updated 16 hours ago (2024-11-20T18:10:37.543Z)
Download STIX
Preview STIX
GhostSec is a malware program that has been involved in significant cybercrime activities. Notably, this malicious software is designed to exploit and damage computer systems, infiltrating through suspicious downloads, emails, or websites without the user's knowledge. Once inside, GhostSec can steal personal information, disrupt operations, or hold data hostage for ransom. The group is particularly notorious for its ability to carry out sophisticated ransomware attacks. In 2023, GhostSec was reported to be attacking satellite receivers, demonstrating their capability to target complex and high-value systems. Furthermore, GhostSec has not been operating in isolation. It has been jointly conducting ransomware attacks with another group known as Stourmous, amplifying the threat they pose to digital security worldwide. These joint operations have been covered extensively by cybersecurity news outlets, warning users and organizations of the imminent danger. Additionally, GhostSec is part of a larger alliance of hacktivist groups known as "The Five Families", which includes another prominent group called SiegedSec. This alliance suggests a level of organization and coordination among these groups, potentially leading to more widespread and damaging cyber-attacks. Therefore, it is crucial for individuals and businesses to take appropriate measures to protect themselves from these threats.
Description last updated: 2024-11-15T16:00:49.596Z
What's your take? (Question 1 of 5)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at. Create a free account to see the source evidence for each alias, and help fix any errors.
Alias DescriptionVotes
Ghostlocker is a possible alias for Ghostsec. GhostLocker is a harmful malware developed by the cybercrime gang GhostSec, which has seen a significant surge in its hacking activities over the past year. The group has recently introduced an updated version of this malicious software, known as GhostLocker 2.0 ransomware, a Golang variant of the o
4
Ghost is a possible alias for Ghostsec. "Ghost" refers to a type of malware that was distributed through a network of GitHub accounts, known as the Stargazers Ghost Network. This malicious software was identified by Check Point Research and was spread via phishing repositories. The malware was designed to exploit and damage computer syste
3
Stmx_ghostlocker is a possible alias for Ghostsec. STMX_GhostLocker is a new and potent form of malware developed by the collaboration of two significant ransomware groups, GhostLocker and Stormous. The malware was first announced on "The Five Families" Telegram channel by the Stormous group on February 24, 2024. This malicious software is designed
2
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Ransomware
Telegram
Cisco
Talos
Cybercrime
RaaS
Denial of Se...
Hacktivist
Extortion
Iran
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Threat Actors
To see the evidence that has resulted in these threatActor associations, create a free account
Alias DescriptionAssociation TypeVotes
The Siegedsec Threat Actor is associated with Ghostsec. SiegedSec, a threat actor group with both hacktivist and crimeware tendencies, has been involved in several significant cyberattacks. As part of an alliance known as The Five Families, which includes another prominent hacktivist group, GhostSec, SiegedSec has targeted various entities around the gloUnspecified
3
The Threatsec Threat Actor is associated with Ghostsec. ThreatSec is a prominent threat actor, or hacking team, known for its malicious cyber activities. It's part of a larger network that includes other hacktivist groups such as GhostSec, Stormous, Blackforums, and SiegedSec, collectively referred to as the modern-day Five Families group. This coalitionUnspecified
2
Source Document References
Information about the Ghostsec Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
Securelist
6 days ago
Securelist
6 days ago
Securityaffairs
3 months ago
Securityaffairs
4 months ago
Securityaffairs
4 months ago
Securityaffairs
4 months ago
Securityaffairs
4 months ago
Securityaffairs
4 months ago
Securityaffairs
5 months ago
Securityaffairs
5 months ago
Securityaffairs
5 months ago
Securityaffairs
6 months ago
Securityaffairs
7 months ago
CERT-EU
2 years ago
BankInfoSecurity
a year ago
CERT-EU
a year ago
CSO Online
2 years ago
Securityaffairs
a year ago
CERT-EU
a year ago
CERT-EU
a year ago