Unpacking Rhysida Ransomware: Technical Insights and the Washington Times Attack
Tags
country: Australia Brazil South Korea
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Remote Desktop Protocol - T1021.001 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 1eadf72e-cb01-411b-9291-662794535bba
Fingerprint 9632905b26668f91
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 16, 2024, 5 a.m.
Added to db Aug. 31, 2024, 11:14 a.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Unpacking Rhysida Ransomware: Technical Insights and the Washington Times Attack
Title Unpacking Rhysida Ransomware: Technical Insights and the Washington Times Attack
Detected Hints/Tags/Attributes 97/3/12
Source URLs
Redirection Url
Details Source https://threatmon.io/blog/unpacking-rhysida-ransomware-technical-insights-and-the-washington-times-attack/
URL Provider
Details Provider Source level domain
Details threatmon.io threatmon.io
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 471 ✔ ThreatMon Blog https://threatmon.io/blog/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 124 
www.sentinelone.com
Details Domain 98 
www.ncsc.gov.uk
Details Domain 604 
www.trendmicro.com
Details Domain 67 
www.checkpoint.com
Details Domain 469 
www.cisa.gov
Details Url 1 
https://www.sentinelone.com/anthology/rhysida
Details Url 1 
https://www.ncsc.gov.uk/ransomware/home
Details Url 1 
https://www.cm-alliance.com/cybersecurity-blog/major-cyber-attacks-data-breaches-ransomware-attacks-in-april-2024
Details Url 1 
https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-rhysida
Details Url 1 
https://www.checkpoint.com/cyber-hub/threat-prevention/ransomware
Details Url 1 
https://www.crn.com/news/security/2024/10-major-cyberattacks-and-data-breaches-in-2024-so-far?itc=refresh
Details Url 1 
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-319a