| ID | Votes | Profile Description |
|---|---|---|
| Clop | 7 | Clop, also known as Cl0p, is a notorious ransomware group responsible for several high-profile cyberattacks. The group specializes in exploiting vulnerabilities in software and systems to gain unauthorized access, exfiltrate sensitive data, and then extort victims by threatening to release the stole |
| FlawedGrace | 5 | FlawedGrace is a notorious malware, a remote access trojan (RAT), that has been used extensively in cyberattacks. It was first brought to light in June 2023 when The DFIR Report revealed its use in Truebot operations. In these operations, following the successful download of a malicious file, Truebo |
| TA505 | 3 | TA505, also known as Cl0p Ransomware Gang and Lace Tempest, is a highly active and sophisticated cybercriminal group. The group has been associated with various high-profile cyber-attacks, demonstrating adaptability through a multi-vector approach to their operations. In June 2023, the U.S. Cybersec |
| ID | Type | Votes | Profile Description |
|---|---|---|---|
| truebot malware | Unspecified | 8 | Truebot malware is a malicious software that infiltrates computer systems, often without the user's knowledge, to exploit and damage the device. It was primarily delivered by cyber threat actors via malicious phishing email attachments, but newer versions observed in 2023 also gained initial access |
| Raspberry Robin | Unspecified | 3 | Raspberry Robin is a sophisticated piece of malware that uses a variety of tactics to infiltrate and exploit computer systems. It employs the CPUID instruction to conduct several checks, enabling it to assess the system's characteristics and vulnerabilities. Furthermore, Raspberry Robin has been obs |
| Cobalt Strike Beacon | Unspecified | 2 | Cobalt Strike Beacon is a type of malware that has been linked to various ransomware activities. This malicious software has been loaded by HUI Loader in several instances, with different files such as mpc.tmp, dlp.ini, and vmtools.ini being used. A unique feature of this Cobalt Strike Beacon shellc |
| Bumblebee | Unspecified | 2 | Bumblebee is a type of malware that has been linked to ITG23, a cybercriminal group known for its use of crypters such as Emotet, IcedID, Qakbot, Bumblebee, and Gozi. Distributed via phishing campaigns or compromised websites, Bumblebee enables the delivery and execution of further payloads. The sam |
| IcedID | Unspecified | 2 | IcedID is a malicious software (malware) that has been linked to various cybercrime operations. The malware can infiltrate systems via suspicious downloads, emails, or websites and proceed to steal personal information, disrupt operations, or hold data for ransom. IcedID has been associated with oth |
| Silence Downloader | Unspecified | 2 | None |
| ID | Type | Votes | Profile Description |
|---|---|---|---|
| Evil Corp | Unspecified | 2 | Evil Corp, a threat actor group based in Russia, has been identified as a significant cybercrime entity responsible for the execution of malicious actions. The alleged leader of this group is Maksim Yakubets, who is notably associated with Dridex malware operations. The U.S. Treasury imposed sanctio |
| Lace Tempest | Unspecified | 2 | Lace Tempest, a threat actor known for executing actions with malicious intent, has been identified as the orchestrator behind a series of cyber attacks exploiting a zero-day vulnerability in SysAid. The exploit was first brought to light by SysAid and further detailed in a blog post on TuxCare. Thi |
| Bl00dy | Unspecified | 2 | Bl00dy is a threat actor known for its malicious activities in the cyber world. The group, along with another threat actor called Black Basta, have recently been identified as exploiting bugs in ConnectWise ScreenConnect, a popular remote management tool. This exploitation has led to a significant i |
| ID | Type | Votes | Profile Description |
|---|---|---|---|
| CVE-2022-31199 | Unspecified | 5 | CVE-2022-31199 is a critical remote code execution (RCE) vulnerability discovered in Netwrix Auditor, a widely-used software for on-premises and cloud-based IT system auditing. This flaw in the software's design or implementation allows cyber threat actors to exploit it and gain unauthorized access |
| Preview | Source Link | CreatedAt | Title |
|---|---|---|---|
| BankInfoSecurity | 5 months ago | Raspberry Robin Morphs, Now Spreads via Windows Script Files | |
| Flashpoint | a year ago | No title | |
| CERT-EU | a year ago | ShadowSyndicate: A New Cybercrime Group Linked to 7 Ransomware Families | |
| CERT-EU | a year ago | Clop at the top – but for how long? | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting | |
| CERT-EU | a year ago | Clop at the top – but for how long? | |
| CERT-EU | a year ago | Celerium-NACo Cybersecurity Pilot Program Helps County Governments Detect, Disrupt, and Deter Compromise Activity | |
| CERT-EU | a year ago | 3 Malware Loaders Detected in 80% of Attacks: Security Firm | |
| CERT-EU | a year ago | These 3 loaders were behind 80% of intrusions this year | |
| CERT-EU | a year ago | Anomali Cyber Watch: Lancefly APT Adopts Alternatives to Phishing, BPFdoor Removed Hardcoded Indicators, FBI Ordered Russian Malware to Self-Destruct | |
| CERT-EU | a year ago | Cl0p in Your Network? Here's How to Find Out | |
| CERT-EU | a year ago | Tracing Truebot’s Roots through a DNS Deep Dive | |
| CERT-EU | a year ago | SafeBreach Coverage for US-CERT Alert (AA23-158A) – CVE-2023-3462 MOVEit Vulnerability | |
| Securityaffairs | a year ago | Russian cybercrime group behind exploitation of PaperCut flaws | |
| CERT-EU | a year ago | Top Malware Trends of May: Cofense Phishing Defense Center (PDC) | |
| CERT-EU | a year ago | Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware | |
| InfoSecurity-magazine | a year ago | Microsoft Blames Clop Affiliate for PaperCut Attacks | |
| CERT-EU | a year ago | Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert | |
| CERT-EU | a year ago | Attacks on PaperCut servers tied to Clop, LockBit ransomware groups | #ransomware | #cybercrime – National Cyber Security Consulting | |
| Securityaffairs | a year ago | Experts released PoC for actively exploited PaperCut flaw | |
| CERT-EU | a year ago | The Good, the Bad and the Ugly in Cybersecurity – Week 17 | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware – National Cyber Security Consulting |