Akira Ransomware gang targets Cisco ASA without Multi-Factor Auth
Tags
attack-pattern: Credential Stuffing - T1110.004 Credentials - T1589.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Ntds - T1003.003 Software - T1592.002 Brute Force - T1110
Show in Graph
Common Information
Type Value
UUID 29e6bd7e-bb3f-4a5a-a8d6-c9c01fa88aee
Fingerprint a5b0315b4b56d765
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 31, 2023, 3 p.m.
Added to db Oct. 24, 2023, 1:13 p.m.
Last updated Sept. 3, 2024, 2:56 a.m.
Headline UNKNOWN
Title Akira Ransomware gang targets Cisco ASA without Multi-Factor Auth
Detected Hints/Tags/Attributes 43/1/4
Source URLs
Redirection Url
Details Source https://securityaffairs.com/150157/cyber-crime/cisco-asa-ransomware-attacks.html
URL Provider
Details Provider Source level domain
Details securityaffairs.com securityaffairs.com
Attributes
Details Type #Events CTI Value
Details File 4 
set.bat
Details File 3 
nd.exe
Details IPv4 3 
176.124.201.200
Details IPv4 3 
162.35.92.242