avoslocker Ransomware
Tracked since Jun 13, 2021
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
AvosLocker is the ransomware payload of the Avos RaaS group, active from July 2021 to approximately May 2023, targeting education, manufacturing, and healthcare sectors on Windows, Linux, and VMware ESXi environments, with the US accounting for ~72% of victims.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Credential Theft
LaZagne · Mimikatz · XenArmor
Defense Evasion
Avast Anti-Rootkit driver
Discovery Enum
NirSoft WinLister · Nmap · SoftPerfect NetScan
Exfiltration
FileZilla · Gofile[.]io · PSCP · RClone · share[.]riseup[.]net
LOLBAS
PsExec · WMIC
Networking
Chisel · Ligolo
Offsec
Cobalt Strike · Sliver
RMM-Tools
AnyDesk · Atera · PDQ Deploy · Splashtop · TacticalRMM
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live