ID | Votes | Profile Description |
---|---|---|
Cobaltstrike | 3 | CobaltStrike is a type of malware, or malicious software, that infiltrates systems to exploit and damage them. It can gain access via suspicious downloads, emails, or websites and then steal personal information, disrupt operations, or hold data for ransom. CobaltStrike has been observed in conjunct |
Jsworm | 3 | JSWorm is a type of malware, specifically ransomware, that was active from 2019 to 2021. This malicious software was developed and operated by a threat actor known as 'farnetwork', who has used various aliases including farnetworkl, jingo, jsworm, razvrat, piparkuka, and farnetworkit. Farnetwork gai |
IcedID | 2 | IcedID is a malicious software (malware) that has been linked to various cybercrime operations. The malware can infiltrate systems via suspicious downloads, emails, or websites and proceed to steal personal information, disrupt operations, or hold data for ransom. IcedID has been associated with oth |
Cactus | 2 | Cactus is a malicious software (malware) that infiltrates systems to exploit and damage them. This malware, often delivered through suspicious downloads, emails, or websites, can steal personal information, disrupt operations, or hold data hostage for ransom. Cactus has been used in several high-pro |
ID | Type | Votes | Profile Description |
---|---|---|---|
Farnetwork | is related to | 5 | Farnetwork, a notorious malware operator identified by cybersecurity researchers from Group-IB, has been active in the cybercrime scene since 2019. Known for deploying five different strains of ransomware, including its proprietary strain Nokoyawa, Farnetwork has collaborated with other cybercrimina |
Clop | is related to | 4 | Clop, also known as Cl0p, is a notorious ransomware group responsible for several high-profile cyberattacks. The group specializes in exploiting vulnerabilities in software and systems to gain unauthorized access, exfiltrate sensitive data, and then extort victims by threatening to release the stole |
Droxidat | is related to | 3 | DroxiDat, a new variant of the SystemBC malware, was deployed in a series of attacks on critical infrastructure targets in Africa during the third and fourth weeks of March. The malware, which acts as a system profiler and simple SOCKS5-capable bot, was specifically detected at an electric utility c |
Conti | is related to | 3 | Conti is a notorious malware and ransomware operation that has caused significant damage to computer systems worldwide. The Conti group, believed to have around 200 employees, operated like a regular business, with internal communications revealing the organization's structure and operations. It was |
Snatch | is related to | 2 | Snatch is a type of malware, specifically a ransomware, that poses significant threats to digital security. This malicious software infiltrates systems typically via suspicious downloads, emails, or websites, often unbeknownst to the user. Once inside a system, Snatch can cause extensive damage, inc |
Hive | is related to | 2 | Hive is a malicious software (malware) that has been used by the cybercriminal group, Hunters International, to launch ransomware attacks since October of last year. The group operates as a ransomware-as-a-service (RaaS) provider, spreading Hive rapidly through collaborations with less sophisticated |
ID | Type | Votes | Profile Description |
---|---|---|---|
Hive Ransomware | Unspecified | 2 | Hive ransomware, a notorious threat actor, emerged as one of the most prolific groups in 2022, executing a series of cyberattacks with malicious intent. This group was responsible for numerous ransomware attacks, causing significant disruptions and damage across various sectors. However, in January |
Alphv | Unspecified | 2 | Alphv is a threat actor group known for its malicious activities in the cyber world. They have been particularly active in deploying ransomware attacks, with one of their most significant actions being the theft of 5TB of data from Morrison Community Hospital. This act not only disrupted hospital op |
ID | Type | Votes | Profile Description |
---|---|---|---|
CVE-2023-28252 | has used | 3 | CVE-2023-28252 is a critical Elevation of Privilege vulnerability found in the Windows Common Log File System (CLFS) driver. This flaw was discovered by Kaspersky researchers while preventing attacks on users, marking it as a zero-day vulnerability. The vulnerability presents a significant risk with |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
BankInfoSecurity | 5 months ago | On the Increase: Zero-Days Being Exploited in the Wild | |
CERT-EU | a year ago | ShadowSyndicate: A New Cybercrime Group Linked to 7 Ransomware Families | |
CERT-EU | 8 months ago | The Top 10 Ransomware Groups of 2023 | |
CERT-EU | 8 months ago | And that's a wrap for Babuk Tortilla ransomware as free decryptor released • The Register | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting | |
CERT-EU | 8 months ago | Babuk Tortilla ransomware decryptor made available | #ransomware | #cybercrime | National Cyber Security Consulting | |
CERT-EU | 9 months ago | Ransomware Attackers Abuse Multiple Windows CLFS Driver Zero-Days | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting | |
DARKReading | 9 months ago | Ransomware Attackers Abuse Multiple Windows CLFS Driver Zero-Days | |
BankInfoSecurity | 9 months ago | Breach Roundup: MongoDB Blames Phishing Email for Breach | |
Securelist | 9 months ago | Windows CLFS and five exploits used by ransomware operators (Exploit #5 – CVE-2023-28252) | |
CERT-EU | 9 months ago | Play Ransomware: SafeBreach Coverage for US-CERT Alert (AA23-352A) | |
Securelist | 9 months ago | Kaspersky malware report for Q3 2023 | |
CERT-EU | a year ago | Data breach disclosed by Canadian Nurses Association | |
CERT-EU | a year ago | The Bug Report – April 2023 by Trellix – Global Security Mag Online | |
CERT-EU | 10 months ago | Play ransomware is now available as Ransomware-as-a-Service | |
CERT-EU | 10 months ago | Threat Intelligence Work Reveals Threat Actor Farnetwork Operations | |
CERT-EU | 10 months ago | From Concealed to Revealed: Dark Web Slip-Up Exposes Ransomware Mastermind | |
BankInfoSecurity | 10 months ago | Breach Roundup: Mr. Cooper Recovers From Hacking Incident | |
CERT-EU | 10 months ago | Prolific ransomware crook spills the beans on several operations | |
CERT-EU | 10 months ago | Ransomware Mastermind Uncovered After Oversharing on Dark Web | |
DARKReading | 10 months ago | Ransomware Mastermind Uncovered After Oversharing on Dark Web |