Jolly RogerMalware
ransomwareFrom MISP Galaxy
Last reported 4 years ago, by Group-IB1 report
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1021.001Remote Desktop Protocol
“…chain of an attack involving MajikPOS starts with scanning for open and poorly secured VNC (Virtual Network Computing) and RDP (Remote Desktop Protocol) ports.”
- T1110Brute Force
“When such assets are identified, the attackers then brute-force their way into the system.”
- T1218.002Control Panel
“…ddition could be due to the fact that MajikPOS had been released later and had additional features such as a more visually appealing control panel, an encrypted communication channel with C2, more structured logs, and more.”
What the reports say
1 report, newest first · the exact sentence from each-
Treasure trove. Alive and well point-of-sale malware“TreasureHunter version 0.1 Alpha, created by Jolly Roger”
Indicators in its reports
named in the reports above- exploit[.]inin 1 report
- prv[.]namein 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.