Recycling ransomware: The return of Ryuk | Darktrace Blog
Tags
country: Australia Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Models Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Phishing - T1660 Phishing - T1566 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 1aacf856-b77b-48cd-87f8-24c783beb933
Fingerprint a78029118923de83
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 20, 2021, midnight
Added to db Aug. 13, 2023, 4:53 p.m.
Last updated Nov. 13, 2024, 6:33 a.m.
Headline Recycling ransomware: The return of Ryuk
Title Recycling ransomware: The return of Ryuk | Darktrace Blog
Detected Hints/Tags/Attributes 97/3/13
Source URLs
Redirection Url
Details Source https://darktrace.com/blog/recycling-ransomware-the-return-of-ryuk
URL Provider
Details Provider Source level domain
Details darktrace.com darktrace.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 101 ✔ — https://de.darktrace.com/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 110 
exploit.in
Details Domain 76 
ipfs.io
Details Domain 58 
image.thum.io
Details Domain 58 
logo.clearbit.com
Details Domain 58 
mku.ipfs.dweb.link
Details Domain 58 
filebase.com
Details File 58 
ob.html
Details File 58 
atob.html
Details File 58 
cpmk.htm
Details Url 58 
https://ipfs.io/ipfs/qmfddxlwoliqfurx6duzcshxvbp1znm21h5jxgs1ffnxtp?filename=at
Details Url 58 
https://ipfs.io/ipfs/qmfddxlwoli
Details Url 58 
https://filebase.com/blog/ipfs-content-addressing-explained
Details Url 58 
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-attack-of-the-chameleon-phishing-page