Crimeware server used by NetWalker ransomware seized and shut down
Tags
country: Poland
maec-delivery-vectors: Watering Hole
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Brute Force - T1110
Show in Graph
Common Information
Type Value
UUID c5341acd-fc0b-4a34-a146-4955d59a01a8
Fingerprint 8132c0de8157a60f
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 14, 2023, 6:11 p.m.
Added to db Oct. 22, 2023, 10:19 p.m.
Last updated Sept. 22, 2024, 3:30 p.m.
Headline Crimeware server used by NetWalker ransomware seized and shut down
Title Crimeware server used by NetWalker ransomware seized and shut down
Detected Hints/Tags/Attributes 26/3/1
Source URLs
Redirection Url
Details Redirection https://nakedsecurity.sophos.com/2023/08/14/crimeware-server-used-by-netwalker-ransomware-seized-and-shut-down/
Details Redirection https://news.sophos.com/en-us/08/14/crimeware-server-used-by-netwalker-ransomware-seized-and-shut-down/
Details Source https://news.sophos.com/en-us/2023/08/14/crimeware-server-used-by-netwalker-ransomware-seized-and-shut-down/
URL Provider
Details Provider Source level domain
Details sophos.com nakedsecurity.sophos.com
Details sophos.com news.sophos.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 177 ✔ — https://nakedsecurity.sophos.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 8 
lolekhosted.net