IsaacWiperMalware
- lasainraw
According to Recorded Future, IsaacWiper is a destructive malware that overwrites all physical disks and logical volumes on a victim’s machine.From MISP Galaxy
Last reported 3 years ago, by Group-IB1 report
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1133External Remote Services
“…nds detected, including but not limited to the exploitation of zero-day vulnerabilities, living-off-the-land (LotL) techniques, external remote services, phishing campaigns using bots, new malware threats, and post-exploitation frameworks.”
- T1505.003Web Shell
“Accounts (which combined accounted for 70% of the access type that was sold), access to web panels (CMS, cloud solutions, etc.), web shells on compromised servers, access with administrator rights, access to corporate emails belonging to top management, FTP servers and web access…”
- T1684Social Engineering
“Social engineering is one of the most effective techniques available to threat actors.”
What the reports say
1 report, newest first · the exact sentence from each-
Know Thy Enemy: unraveling the “Hi-Tech Crime Trends 2022/2023” report“During the ongoing crisis, state-sponsored groups used at least seven different wipers (WhisperKill, WhisperGate, HermeticWiper, IsaacWiper, CaddyWiper, DoubleZero, and AcidRain) to target Ukrainian companies and infrastructure.”
Indicators in its reports
named in the reports above- elogin[.]comin 1 report
Copy this indicator · defanged
Thanks — we review every report.