Human-operated ransomware attacks: A preventable disaster - Microsoft Security Blog
Tags
cmtmf-attack-pattern: Compromise Accounts Process Injection
maec-delivery-vectors: Watering Hole
attack-pattern: Data Accessibility Features - T1546.008 Artificial Intelligence - T1588.007 Botnet - T1583.005 Botnet - T1584.005 Compromise Accounts - T1586 Credentials - T1589.001 Domain Accounts - T1078.002 Local Accounts - T1078.003 Lsa Secrets - T1003.004 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Injection - T1631 Remote Desktop Protocol - T1021.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Accessibility Features - T1015 Brute Force - T1110 Connection Proxy - T1090 Credential Dumping - T1003 Powershell - T1086 Process Injection - T1055 Remote Desktop Protocol - T1076 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 2960ad82-f159-442c-ab11-63e2f4277187
Fingerprint a73009d80065964f
Analysis status DONE
Considered CTI value 0
Text language
Published March 5, 2020, 9 a.m.
Added to db Sept. 26, 2022, 9:30 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline Human-operated ransomware attacks: A preventable disaster
Title Human-operated ransomware attacks: A preventable disaster - Microsoft Security Blog
Detected Hints/Tags/Attributes 151/3/7
Source URLs
Redirection Url
Details Source https://www.microsoft.com/security/blog/2020/03/05/human-operated-ransomware-attacks-a-preventable-disaster/
URL Provider
Details Provider Source level domain
Details microsoft.com www.microsoft.com
Attributes
Details Type #Events CTI Value
Details Domain 107 
aka.ms
Details File 2 
masscan.exe
Details File 5 
nlbrute.exe
Details File 8 
wevutil.exe
Details File 25 
findstr.exe
Details File 1 
massmail.exe
Details File 256 
net.exe