MatrixMalware
- malta ransomware
- matrix ransomware
It’s directed to English speaking users, therefore is able to infect worldwide. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc…From MISP Galaxy
Last reported 3 years ago, by Group-IB2 reports
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1036Masquerading
“Active since at least July 2022, Gigabud.Loan has been masquerading as applications of fictional financial institutions from Thailand, Indonesia, and Peru.”
- T1056.001Keylogging
“The latest Gigabud versions contain another feature that abuses accessibility services – a new keylogging module that allows preparing the specific password-stealing scheme for each targeted banking application.”
- T1684Social Engineering
“This combination of social engineering and permission exploitation underscores the significance of user awareness and caution when encountering unexpected or suspicious requests, safeguarding against the potential infiltration of dangerous malware.”
What the reports say
2 reports, newest first · the exact sentence from each-
Let’s dig deeper: dissecting the new Android Trojan GoldDigger with Group-IB Fraud Matrix“…Matrix Report an incident Get 24/7 incident response assistance from our global team APAC: +65 3159 4398 EU & NA: +31 20 890 55 59 MEA: +971 4 540 6400 LATAM: +56 2 275 473 79 Products The Unified Risk Platform Prevent breaches, fraud, and brand abuse with intelligence-driven solutions powered by a single platform Integrations Enhance your portfolio by integrating Group-IB solutions Products Threat Intelligence Attack Surface Management Fraud Protection Digital Risk Protection Managed XDR Business Email Protection Cyber Fraud Intelligence Platform Cloud Security Posture Management Free Tools Email Protection Audit Program Messages and Files Encryption Network Protection Assessment Malware Reports Integrations Enhance your portfolio by integrating Group-IB solutions Learn more Services Services Retainer From emergency support to strategic resilience in one agreement Learn more Assessment Incident Response Readiness Assessment Penetration Testing Vulnerability Assessment Red Teaming Purple Teaming Compromise Assessment AI Red Teaming SOC Assessment Tabletop Exercises Development SOC Consulting Threat Landscape Response Incident Response Incident Response Retainer Digital Forensics Regional Threat Readiness Program Training Training for Technical Specialists Management Masterclasses Hi-Tech Crime Investigation Cyber Investigation Investigation Subscription Solutions Solutions by Role CISO Head of Fraud Head of Brand Protection Head of Threat Intelligence SOC Manager Security Analyst Solutions by Use Case Data Leak Detection Ransomware Protection Phishing and Scam Protection Bot Protection Business Email Protection Dark Web and Deep Web Monitoring Building CTI Program Vulnerability Management Supply Chain Attacks Network Security Data Center Security Solutions by Industry Law Enforcement Regulatory Compliance Retail and e-Commerce Crypto Industry Governments Telecom and Service Providers Online Gambling and Betting Financial Services Insurance Sector OT/ICS Cybersecurity Manufacturing Industry Small and Medium Business Oil and Gas SaaS Energy and Utility Healthcare Solutions by Role CISO Head of Fraud Head of Brand Protection Head of Threat Intelligence SOC Manager Security Analyst Outrunning ransomware Ransomware…”
-
Breaking down Gigabud banking malware with Group-IB Fraud Matrix“…Matrix Report an incident Get 24/7 incident response assistance from our global team APAC: +65 3159 4398 EU & NA: +31 20 890 55 59 MEA: +971 4 540 6400 LATAM: +56 2 275 473 79 Products The Unified Risk Platform Prevent breaches, fraud, and brand abuse with intelligence-driven solutions powered by a single platform Integrations Enhance your portfolio by integrating Group-IB solutions Products Threat Intelligence Attack Surface Management Fraud Protection Digital Risk Protection Managed XDR Business Email Protection Cyber Fraud Intelligence Platform Cloud Security Posture Management Free Tools Email Protection Audit Program Messages and Files Encryption Network Protection Assessment Malware Reports Integrations Enhance your portfolio by integrating Group-IB solutions Learn more Services Services Retainer From emergency support to strategic resilience in one agreement Learn more Assessment Incident Response Readiness Assessment Penetration Testing Vulnerability Assessment Red Teaming Purple Teaming Compromise Assessment AI Red Teaming SOC Assessment Tabletop Exercises Development SOC Consulting Threat Landscape Response Incident Response Incident Response Retainer Digital Forensics Regional Threat Readiness Program Training Training for Technical Specialists Management Masterclasses Hi-Tech Crime Investigation Cyber Investigation Investigation Subscription Solutions Solutions by Role CISO Head of Fraud Head of Brand Protection Head of Threat Intelligence SOC Manager Security Analyst Solutions by Use Case Data Leak Detection Ransomware Protection Phishing and Scam Protection Bot Protection Business Email Protection Dark Web and Deep Web Monitoring Building CTI Program Vulnerability Management Supply Chain Attacks Network Security Data Center Security Solutions by Industry Law Enforcement Regulatory Compliance Retail and e-Commerce Crypto Industry Governments Telecom and Service Providers Online Gambling and Betting Financial Services Insurance Sector OT/ICS Cybersecurity Manufacturing Industry Small and Medium Business Oil and Gas SaaS Energy and Utility Healthcare Solutions by Role CISO Head of Fraud Head of Brand Protection Head of Threat Intelligence SOC Manager Security Analyst Outrunning ransomware Ransomware…”
Indicators in its reports
named in the reports above- ks8cb[.]ccin 1 report
- ms2ve[.]ccin 1 report
- zu7kt[.]ccin 1 report
- d8834a21bc70fbe2…e35be1b7276bin 1 report
- hds6y[.]ccin 1 report
- smgeo[.]ccin 1 report
- www.dg1e[.]comin 1 report
- wbke[.]ccin 1 report
- c2b91a1d4b3d1dff…7320709230a1in 1 report
- 139a5bcc92044e2e…abac6a1634bcin 1 report
- 569626b0b6ef277c…ac492fb4e6a7in 1 report
- 6171db5548941aff…9b72fcffbb60in 1 report
- 0ffd769fec531474…972dd82414f5in 1 report
- 6a8c601ba5a0eaeb…11bd07457407in 1 report
- 43d058aacb210c33…9e233b3f1cd4in 1 report
- 03b30ad69bd7c4ef…db6b46fb6164in 1 report
- b80a297daeb4ae11…5ceeff53267cin 1 report
- 380abc14ee41ad14…8d8f86287427in 1 report
- 5827a6e0251a095b…e9f48fe61ff1in 1 report
- fbb2ec92e725740c…14aab6cfb0e3in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.