Suspected Conti Ransomware Activity in the Auto Manufacturing Sector
Tags
country: Japan Russia Ukraine
attack-pattern: Data Model Botnet - T1583.005 Botnet - T1584.005 Commonly Used Port - T1436 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Vulnerabilities - T1588.006 Commonly Used Port - T1043 Commonly Used Port
Show in Graph
Common Information
Type Value
UUID d1c2b526-ea50-46e6-a8bc-8592be9005d0
Fingerprint a790d0f100372bd0
Analysis status DONE
Considered CTI value 0
Text language
Published March 16, 2022, 3:30 p.m.
Added to db Sept. 11, 2022, 12:42 p.m.
Last updated Sept. 3, 2024, 6:33 p.m.
Headline Suspected Conti Ransomware Activity in the Auto Manufacturing Sector
Title Suspected Conti Ransomware Activity in the Auto Manufacturing Sector
Detected Hints/Tags/Attributes 55/2/12
Source URLs
Redirection Url
Details Source https://www.dragos.com/blog/industry-news/suspected-conti-ransomware-activity-in-the-auto-manufacturing-sector/
URL Provider
Details Provider Source level domain
Details dragos.com www.dragos.com
Attributes
Details Type #Events CTI Value
Details Autonomous System Number 1 
AS269305
Details IPv4 1 
82.202.192.66
Details IPv4 3 
67.205.162.68
Details IPv4 1 
188.241.120.42
Details IPv4 1 
185.9.18.154
Details IPv4 2 
178.128.83.165
Details IPv4 3 
162.243.175.63
Details IPv4 3 
159.65.1.71
Details IPv4 2 
134.209.156.68
Details IPv4 2 
159.89.230.105
Details IPv4 5 
45.184.36.10
Details MITRE ATT&CK Techniques 6 
T0885