jswormMalware
JSWorm is a ransomware family that first appeared in May 2019 and is notable for undergoing multiple rebrands and evolutions, later appearing under names such as Nemty, Nefilim, Offwhite, Fusion, and Milihpen. Initially, it was distributed via malicious spam emails containing JavaScript files, hence the “JS” in its name.From MISP Galaxy
Last reported 2 years ago, by Group-IB1 report
What the reports say
1 report, newest first · the exact sentence from each-
Ransomware manager: Investigation into farnetwork, a threat actor linked to five strains of ransomware“But before we delve into that, we would like to talk about farnetwork, a threat actor known as farnetworkl, jingo, jsworm, razvrat, piparkuka, and farnetworkit.”
Indicators in its reports
named in the reports above- exploit[.]inin 1 report
- pentest-tools[.]comin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.