CVE Intelligence

darkside Ransomware

🔔 Criar alerta

Monitorado desde 01/08/2020

0
vítimas registradas
0
nos últimos 30 dias
0
CVEs
—
Última atividade

Darkside ransomware group has started its operation in August of 2020 with the model of RaaS (Ransomware-as-a-Service). They have become known for their operations of large ransoms scale. They have announced that they prefer not to attack hospitals, schools, non-profits, and governments, but rather big organizations that can be able to pay large ransoms. Darkside ransomware group became very famous following the cyberattack of the Colonial Pipeline and Toshiba unit. The FBI finally terminate the Darkside operation and Managed to pull money from their wallets back.

Vulnerabilidades citadas para este grupo

CVEs associadas ao grupo pelo ransomware.live. Fichas ainda não publicadas aparecem sem link.

Nenhuma CVE associada a este grupo nas fontes.

Ferramentas observadas

Credential Theft
Mimikatz · SessionGopher
Discovery Enum
ADRecon · AdFind · Advanced IP Scanner · SoftPerfect NetScan
Exfiltration
Bashupload · MEGA · RClone · Sendspace · pCloud
LOLBAS
PsExec
Networking
Plink
Offsec
Cobalt Strike · CrackMapExec · Impacket · PowerSploit
RMM-Tools
AnyDesk · GoToAssist · TightVNC

Vítimas divulgadas em sites de vazamento, segundo o ransomware.live. Não exibimos nomes de vítimas. · Ver no ransomware.live