DarksideMalware
Darkside, the latest ransomware operation to emerge has been attacking organizations beginning earlier this month. Darkside’s customized attacks on companies have already garnered them million-dollar payouts. Through their “press release”, these threat actors have claimed to be affiliated with prior ransomware operations making millions of dollars.From MISP Galaxy
Last reported 5 years ago, by Group-IB2 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1219Remote Access Tools
“Make your remote access tools secure.”
What the reports say
2 reports, newest first · the exact sentence from each-
It’s alive!“A comparative analysis of the encryption code implementation with the Darkside samples also revealed that they are very similar.”
-
Silence: Moving into the Darkside“Silence: Moving into the Darkside”
Indicators in its reports
named in the reports above- hxxps://paymenthacks[.]comin 1 report
- paymenthacks[.]comin 1 report
- hxxp://paymenthacks[.]comin 1 report
- hxxps://mojobiden[.]comin 1 report
- mojobiden[.]comin 1 report
- hxxp://mojobiden[.]comin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.