North Korean nation-state threat actor using Play ransomware | #ransomware | #cybercrime | National Cyber Security Consulting
Tags
country: China North Korea Iran
attack-pattern: Credentials - T1589.001 Remote Desktop Protocol - T1021.001 Security Account Manager - T1003.002 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Credential Dumping - T1003 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 73094f3d-f705-4665-87ad-5cd6618b4ee9
Fingerprint 272bc8bb9a069fcd
Analysis status DONE
Considered CTI value 1
Text language
Published Oct. 30, 2024, 11:45 p.m.
Added to db Oct. 31, 2024, 12:53 a.m.
Last updated March 19, 2025, 3:15 p.m.
Headline North Korean nation-state threat actor using Play ransomware | #ransomware | #cybercrime
Title North Korean nation-state threat actor using Play ransomware | #ransomware | #cybercrime | National Cyber Security Consulting
Detected Hints/Tags/Attributes 64/2/1
Source URLs
Redirection Url
Details Source https://nationalcybersecurity.com/north-korean-nation-state-threat-actor-using-play-ransomware-ransomware-cybercrime/?utm_source=rss&utm_medium=rss&utm_campaign=north-korean-nation-state-threat-actor-using-play-ransomware-ransomware-cybercrime
URL Provider
Details Provider Source level domain
Details nationalcybersecurity.com nationalcybersecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 6 ✔ National Cyber Security Consulting http://nationalcybersecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Threat Actor Identifier - APT 677 
APT41