Staying ahead of REvil’s Ransomware-as-a-Service business model | Darktrace Blog
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Models Cloud Services - T1021.007 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002
Show in Graph
Common Information
Type Value
UUID 1ea24e10-fdcb-42e6-8604-694b5fffd1b4
Fingerprint a7920912a903de0b
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 13, 2022, midnight
Added to db Aug. 13, 2023, 1:33 a.m.
Last updated Oct. 16, 2024, 2:03 a.m.
Headline Staying ahead of REvil’s Ransomware-as-a-Service business model
Title Staying ahead of REvil’s Ransomware-as-a-Service business model | Darktrace Blog
Detected Hints/Tags/Attributes 101/3/12
Source URLs
Redirection Url
Details Source https://darktrace.com/blog/staying-ahead-of-revils-ransomware-as-a-service-business-model
URL Provider
Details Provider Source level domain
Details darktrace.com darktrace.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 101 ✔ — https://de.darktrace.com/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 76 
ipfs.io
Details Domain 58 
image.thum.io
Details Domain 58 
logo.clearbit.com
Details Domain 58 
mku.ipfs.dweb.link
Details Domain 58 
filebase.com
Details File 58 
ob.html
Details File 58 
atob.html
Details File 58 
cpmk.htm
Details Url 58 
https://ipfs.io/ipfs/qmfddxlwoliqfurx6duzcshxvbp1znm21h5jxgs1ffnxtp?filename=at
Details Url 58 
https://ipfs.io/ipfs/qmfddxlwoli
Details Url 58 
https://filebase.com/blog/ipfs-content-addressing-explained
Details Url 58 
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-attack-of-the-chameleon-phishing-page