mosesstaff Ransomware
Tracked since Dec 18, 2021
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
In MITRE ATT&CK MITRE ATT&CK
Group profile: Moses Staff (G1009)
Cybereason Nocturnus describes Moses Staff as an Iranian hacker group, first spotted in October 2021. Their motivation appears to be to harm Israeli companies by leaking sensitive, stolen data.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Tactics and techniques (MITRE ATT&CK)
Initial Access
T1190 Exploit Public-Facing Application Persistence
T1505.003 Server Software Component: Web Shell Stealth
T1027.013 Obfuscated Files or Information: Encrypted/Encoded File Discovery
T1016 System Network Configuration DiscoveryT1082 System Information DiscoveryT1087.001 Account Discovery: Local Account Lateral Movement
T1021.002 Remote Services: SMB/Windows Admin Shares Command and Control
T1105 Ingress Tool Transfer Resource Development
T1587.001 Develop Capabilities: MalwareT1588.002 Obtain Capabilities: Tool Defense Impairment
T1553.002 Subvert Trust Controls: Code SigningT1686.003 Disable or Modify System Firewall: Windows Host Firewall Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live