ID | Votes | Profile Description |
---|---|---|
FIN7 | 5 | FIN7, a prominent threat actor in the cybercrime landscape, has been noted for its malicious activities and innovative tactics. Known for their relentless attacks on large corporations, FIN7 recently targeted a significant U.S. carmaker with phishing attacks, demonstrating their continued evolution |
Carbanak | 2 | Carbanak is a sophisticated malware known for its involvement in various cyberattacks since it was first identified. This malicious software, created by the Russian criminal group FIN7 (also known as Carbanak, Carbon Spider, Cobalt Group, Navigator Group), has been active since mid-2015. The group p |
ID | Type | Votes | Profile Description |
---|---|---|---|
Clop | Unspecified | 3 | Clop, also known as Cl0p, is a notorious ransomware group responsible for several high-profile cyberattacks. The group specializes in exploiting vulnerabilities in software and systems to gain unauthorized access, exfiltrate sensitive data, and then extort victims by threatening to release the stole |
Lizar | Unspecified | 2 | Lizar, also known as Tirion or Diceloader, is a malicious software developed by the threat group ITG14. It's designed to exploit and damage computers or devices, infiltrating systems through suspicious downloads, emails, or websites. Once installed, it can steal personal information, disrupt operati |
Jssloader | Unspecified | 2 | JssLoader is a malware often used by the ransomware gang FIN7, also known as Sangria Tempest, Elbrus, Carbon Spider, and others. This malicious software is typically delivered through deceptive tactics such as email lures, including invoice- and payment-themed decoy messages that trick users into do |
Gracewire | Unspecified | 2 | Gracewire is a potent malware that has been deployed by threat actors to exploit and damage computer systems. It is typically delivered through suspicious downloads, emails, or websites, often without the user's knowledge. Once inside a system, it can steal personal information, disrupt operations, |
Darkgate | Unspecified | 2 | DarkGate is a malicious software (malware) designed to exploit and damage computer systems, often infiltrating through suspicious downloads, emails, or websites. Once embedded in a system, DarkGate can steal personal information, disrupt operations, or hold data for ransom. Recently, the malware was |
REvil | Unspecified | 2 | REvil is a type of malware, specifically ransomware, that has been linked to significant cyber attacks. It emerged as part of the Ransomware as a Service (RaaS) model that gained popularity in 2020. This model established relationships between first-stage malware and subsequent ransomware attacks, s |
Maze | Unspecified | 2 | Maze is a type of malware, specifically ransomware, that gained notoriety in 2019 for its double extortion tactic. This malicious software infects systems through suspicious downloads, emails, or websites and can steal personal information, disrupt operations, or hold data hostage for ransom. Maze w |
ID | Type | Votes | Profile Description |
---|---|---|---|
Blackmatter | Unspecified | 2 | BlackMatter is a recognized threat actor in the cybersecurity industry, notorious for its malicious activities and the execution of ransomware attacks. The group initially operated as DarkSide, responsible for the high-profile Colonial Pipeline attack in May 2021, which led to significant attention |
DarkSide | Unspecified | 2 | DarkSide is a threat actor known for its malicious activities, particularly in the realm of ransomware. This group was notably responsible for the major attack on the U.S. energy sector that targeted Colonial Pipeline Co. on May 7, 2021, using a ransomware-as-a-service operation. The DarkSide ransom |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
CERT-EU | 8 months ago | Microsoft Disables App Installer Feature Amid Security Concerns | |
BankInfoSecurity | 5 months ago | FIN7 Targeted US Automotive Giant In Failed Attack | |
DARKReading | 5 months ago | Russian APT Group Thwarted in Attack on US Automotive Manufacturer | |
DARKReading | 6 months ago | The Rise of Social Engineering Fraud in Business Email Compromise | |
CERT-EU | 8 months ago | MSIX App Installer Disabled Amid Microsoft Malware Attacks | |
CERT-EU | 8 months ago | Microsoft disables online Windows App Installer after attackers abuse it | #ransomware | #cybercrime | National Cyber Security Consulting | |
CERT-EU | 8 months ago | Microsoft disables online Windows App Installer after attackers abuse it | #ransomware | #cybercrime | National Cyber Security Consulting | |
CERT-EU | 8 months ago | Israeli orgs subjected to suspected Iranian hacking attacks | |
Checkpoint | 8 months ago | 1st January – Threat Intelligence Report - Check Point Research | |
CERT-EU | 8 months ago | Microsoft Disables App Installer After Feature is Abused for Malware | |
CERT-EU | 8 months ago | Financially motivated threat actors misusing App Installer | Microsoft Security Blog | |
CERT-EU | 8 months ago | Activity of Rugmi malware loader spikes | |
CERT-EU | 8 months ago | Malware attacks exploiting app installation protocol prompt deactivation | |
BankInfoSecurity | 8 months ago | Microsoft Disables Abused Application Installation Protocol | |
CERT-EU | 8 months ago | Microsoft disables app installation protocol abused by hackers | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker | National Cyber Security Consulting | |
CERT-EU | 8 months ago | Microsoft: Microsoft details how financially motivated hackers targeted Windows users | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker | National Cyber Security Consulting | |
CERT-EU | 8 months ago | Financially motivated threat actors misusing App Installer - Cyber Security Review | |
CERT-EU | 8 months ago | Cyber Security Week In Review: December 29, 2023 | |
CERT-EU | 8 months ago | Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks | #ransomware | #cybercrime | National Cyber Security Consulting | |
CERT-EU | 8 months ago | Microsoft disables MSIX protocol handler abused in malware attacks |