AdFind
Associated Software Descriptions |
|
Name | Description |
---|
Groups That Use This Software |
||
ID | Name | References |
---|---|---|
G0092 | TA505 |
(Citation: NCC Group TA505) |
G0030 | Lotus Blossom |
(Citation: Symantec Bilbug 2022) |
G0102 | Wizard Spider |
(Citation: Red Canary Hospital Thwarted Ryuk October 2020) (Citation: FireEye Ryuk and Trickbot January 2019) (Citation: Mandiant FIN12 Oct 2021) (Citation: DFIR Ryuk 2 Hour Speed Run November 2020) (Citation: DFIR Ryuk's Return October 2020) |
G0046 | FIN7 |
(Citation: CrowdStrike Carbon Spider August 2021) |
G1040 | Play |
(Citation: CISA Play Ransomware Advisory December 2023) (Citation: Trend Micro Ransomware Spotlight Play July 2023) |
G1043 | BlackByte |
(Citation: Microsoft BlackByte 2023) (Citation: Symantec BlackByte 2022) |
G0037 | FIN6 |
(Citation: FireEye FIN6 Apr 2019) |
G0118 | UNC2452 |
(Citation: Microsoft Analyzing Solorigate Dec 2020) |
G1024 | Akira |
(Citation: Arctic Wolf Akira 2023) |
G1032 | INC Ransom |
(Citation: Secureworks GOLD IONIC April 2024) |
G0016 | APT29 |
(Citation: Microsoft Analyzing Solorigate Dec 2020) (Citation: CrowdStrike StellarParticle January 2022) (Citation: ESET T3 Threat Report 2021) |
G0045 | menuPass |
(Citation: Symantec Cicada November 2020) |
References
- Terefos, A. (2020, November 18). TA505: A Brief History of Their Time. Retrieved July 14, 2022.
- Brian Donohue, Katie Nickels, Paul Michaud, Adina Bodkins, Taylor Chapman, Tony Lambert, Jeff Felling, Kyle Rainey, Mike Haag, Matt Graeber, Aaron Didier.. (2020, October 29). A Bazar start: How one hospital thwarted a Ryuk ransomware outbreak. Retrieved October 30, 2020.
- Goody, K., et al (2019, January 11). A Nasty Trick: From Credential Theft Malware to Business Disruption. Retrieved May 12, 2020.
- Cybereason. (2022, August 17). Bumblebee Loader – The High Road to Enterprise Domain Control. Retrieved August 29, 2022.
- Kamble, V. (2022, June 28). Bumblebee: New Loader Rapidly Assuming Central Position in Cyber-crime Ecosystem. Retrieved August 24, 2022.
- McKeague, B. et al. (2019, April 5). Pick-Six: Intercepting a FIN6 Intrusion, an Actor Recently Tied to Ryuk and LockerGoga Ransomware. Retrieved April 17, 2019.
Мы используем cookie-файлы, чтобы получить статистику, которая помогает нам улучшить сервис для вас с целью персонализации сервисов и предложений. Вы может прочитать подробнее о cookie-файлах или изменить настройки браузера. Продолжая пользоваться сайтом, вы даёте согласие на использование ваших cookie-файлов и соглашаетесь с Политикой обработки персональных данных.