DEV-0569 finds new ways to deliver Royal ransomware, various payloads - Microsoft Security Blog
Tags
cmtmf-attack-pattern: Traffic Distribution
maec-delivery-vectors: Watering Hole
attack-pattern: Artificial Intelligence - T1588.007 Code Signing Certificates - T1587.002 Code Signing Certificates - T1588.003 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malicious Link - T1204.001 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Scheduled Task - T1053.005 Software - T1592.002 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 60923197-9a01-4ba2-90d9-9fd7ae78864f
Fingerprint ad702851b34ebacf
Analysis status DONE
Considered CTI value 1
Text language
Published Nov. 17, 2022, 9 a.m.
Added to db Nov. 17, 2022, 6:06 p.m.
Last updated Sept. 5, 2024, 1:12 a.m.
Headline DEV-0569 finds new ways to deliver Royal ransomware, various payloads
Title DEV-0569 finds new ways to deliver Royal ransomware, various payloads - Microsoft Security Blog
Detected Hints/Tags/Attributes 95/3/5
Source URLs
Redirection Url
Details Source https://www.microsoft.com/en-us/security/blog/2022/11/17/dev-0569-finds-new-ways-to-deliver-royal-ransomware-various-payloads/
URL Provider
Details Provider Source level domain
Details microsoft.com www.microsoft.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 173 ✔ Microsoft Security Blog https://microsoft.com/security/blog/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
anydeskos.com
Details Domain 1 
updateea1.com
Details File 2 
requestadmin.bat
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 27 
DEV-0569
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 1 
DEV-0858