ctrlINT What the industry said about every indicator, with the quote

deadlockMalware

Last reported 8 days ago, by RansomLook3 reports

ATT&CK techniques

6 of 34 · each with the sentence it comes from
  1. T1001.003Protocol or Service Impersonation

    “Data Obfuscation: Protocol or Service Impersonation”

    Elastic Security LabsVendor
  2. T1005Data from Local System

    “Data from Local System”

    Elastic Security LabsVendor
  3. T1027Obfuscated Files or Information

    “Obfuscated Files or Information: Embedded Payloads”

    Elastic Security LabsVendor
  4. T1027.007Dynamic API Resolution

    “Obfuscated Files or Information: Dynamic API Resolution”

    Elastic Security LabsVendor
  5. T1027.009Embedded Payloads

    “Obfuscated Files or Information: Embedded Payloads”

    Elastic Security LabsVendor
  6. T1027.013Encrypted/Encoded File

    “Obfuscated Files or Information: Encrypted/Encoded File”

    Elastic Security LabsVendor

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

3 reports, newest first · the exact sentence from each

  1. “deadlock lists Far West Contractors”

    RansomLookFeed
    deadlock lists Far West Contractors

  2. “Waiting for that thread from DllMain would therefore deadlock.”

    Elastic Security LabsVendor
    The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

  3. “…l from any point in the kernel where you can attach an eBPF program; which is tricky work that has resulted in some past bugs like this deadlock.”

    Elastic Security LabsVendor
    Signaling from within: how eBPF interacts with signals

Indicators in its reports

named in the reports above
Copy these 17 indicators · defanged

Thanks — we review every report.

Report a wrong match
What is wrong with deadlock here?
No account needed. We do not store your IP address.