CVE Intelligence

avaddon Ransomware

🔔 Create alert

Tracked since Feb 1, 2021

0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity

Avaddon is a ransomware malware targeting Windows systems often spread via malicious spam. The first known attack where Avaddon ransomware was distributed was in February 2020. Avaddon encrypts files using the extension .avdn and uses a TOR payment site for the ransom payment.

Vulnerabilities cited for this group

CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.

No CVE associated with this group in the sources.

Observed tools

Credential Theft
Mimikatz · SharpDump
Defense Evasion
GMER · PowerTool · TDSSKiller
Discovery Enum
SoftPerfect NetScan
Exfiltration
Anonfiles · MEGA · ProtonMail · Sendspace
Offsec
PowerShell Empire · PowerSploit

Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live