ID | Votes | Profile Description |
---|---|---|
Clop | 6 | Clop, also known as Cl0p, is a notorious ransomware group responsible for several high-profile cyberattacks. The group specializes in exploiting vulnerabilities in software and systems to gain unauthorized access, exfiltrate sensitive data, and then extort victims by threatening to release the stole |
TA505 | 3 | TA505, also known as Cl0p Ransomware Gang and Lace Tempest, is a highly active and sophisticated cybercriminal group. The group has been associated with various high-profile cyber-attacks, demonstrating adaptability through a multi-vector approach to their operations. In June 2023, the U.S. Cybersec |
fin11 | 3 | FIN11, a threat actor group also known as Lace Tempest or TA505, has been linked to the development and deployment of Cl0p ransomware. This malicious software is believed to be a variant of another ransomware, CryptoMix, and is typically used by FIN11 to encrypt files on a victim's network after ste |
CVE-2023-34362 | 2 | CVE-2023-34362 is a critical software vulnerability found in Progress Software's managed file transfer (MFT) solution, MOVEit Transfer. This flaw was an SQL injection vulnerability that allowed for escalated privileges and unauthorized access. The vulnerability became active on May 27, 2023, when it |
ID | Type | Votes | Profile Description |
---|---|---|---|
Cobalt Strike Beacon | Unspecified | 3 | Cobalt Strike Beacon is a type of malware that has been linked to various ransomware activities. This malicious software has been loaded by HUI Loader in several instances, with different files such as mpc.tmp, dlp.ini, and vmtools.ini being used. A unique feature of this Cobalt Strike Beacon shellc |
Raspberry Robin | Unspecified | 2 | Raspberry Robin is a sophisticated piece of malware that uses a variety of tactics to infiltrate and exploit computer systems. It employs the CPUID instruction to conduct several checks, enabling it to assess the system's characteristics and vulnerabilities. Furthermore, Raspberry Robin has been obs |
Gracewire | Unspecified | 2 | Gracewire is a potent malware that has been deployed by threat actors to exploit and damage computer systems. It is typically delivered through suspicious downloads, emails, or websites, often without the user's knowledge. Once inside a system, it can steal personal information, disrupt operations, |
Truebot | Unspecified | 2 | Truebot is a highly potent malware used by the threat actor group CL0P, which has been linked to various malicious activities aimed at exploiting and damaging computer systems. It can infiltrate systems through suspicious downloads, emails, or websites, often unbeknownst to the user. Once embedded, |
ID | Type | Votes | Profile Description |
---|---|---|---|
CVE-2023-27350 | Unspecified | 2 | CVE-2023-27350 is a significant software vulnerability discovered in PaperCut NG/MF, a popular print management software. This flaw in software design or implementation allows attackers to bypass authentication and execute code with system privileges, posing a serious threat to both server and inter |
CVE-2023-47246 | has used | 2 | CVE-2023-47246 is a critical zero-day vulnerability discovered in the SysAid IT support and management software solution. The flaw, identified as a path traversal vulnerability, has been exploited by Lace Tempest, a ransomware affiliate known for deploying Cl0p ransomware. This vulnerability allows |
CVE-2023-27351 | Unspecified | 2 | None |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
CERT-EU | 8 months ago | Microsoft Disables App Installer After Feature is Abused for Malware | |
CERT-EU | 8 months ago | Financially motivated threat actors misusing App Installer | Microsoft Security Blog | |
CERT-EU | 8 months ago | A year in review: 10 of the biggest security incidents of 2023 | |
CERT-EU | 10 months ago | “Ransomware Alert: Clop Gang Targets Microsoft with Exploits on SysAid Zero-Day Vulnerability” | |
CERT-EU | 9 months ago | SysAid path traversal vulnerability - Cyber Security Review | |
CERT-EU | 9 months ago | Lace Tempest Exploits SysAid Zero-Day Flaw | |
CERT-EU | 10 months ago | Cyber Security Week In Review: November 17, 2023 | |
CERT-EU | 10 months ago | SysAid Zero-Day Vulnerability Exploited by Threat Actors | |
CERT-EU | 10 months ago | SysAid Ransomware: Unveiling the Zero-Day Menace | |
CERT-EU | 10 months ago | Microsoft and SysAid Find Clop Malware Vulnerability | |
CERT-EU | 10 months ago | Cyber Security Today, Nov. 10, 2023 – Patch SysAid software fast, how Ukraine’s power system was crippled by Russia and more | IT World Canada News | |
CERT-EU | 10 months ago | Clop ransomware gang targets SysAid server bug | |
CERT-EU | 10 months ago | SysAid zero-day exploited by Clop ransomware group | |
CERT-EU | 10 months ago | SysAid zero-day exploited by Clop ransomware group | |
CERT-EU | 10 months ago | CVE-2023-47246: SysAid Flaw Used in Clop Ransomware Attacks | |
InfoSecurity-magazine | 10 months ago | MOVEit Gang Targets SysAid Customers With Zero-Day Attacks | |
DARKReading | 10 months ago | MOVEit Hackers Pivot to SysAid Zero-Day in Ransomware Attacks | |
BankInfoSecurity | 10 months ago | MOVEit Hackers Turn to SysAid Zero-Day Bug | |
CERT-EU | 10 months ago | Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability | |
Malwarebytes | 10 months ago | Update now! SysAid vulnerability is actively being exploited by ransomware affiliate | Malwarebytes |