Cuba ransomware group used Microsoft developer accounts to sign malicious drivers
Tags
country: Cuba
attack-pattern: Code Signing Certificates - T1587.002 Code Signing Certificates - T1588.003 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID ec6c7a29-9130-4b44-af81-0547cf84aba6
Fingerprint a79b89fbd9eebc56
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 14, 2022, midnight
Added to db Dec. 15, 2022, 1:10 a.m.
Last updated Sept. 1, 2024, 2:32 p.m.
Headline Cuba ransomware group used Microsoft developer accounts to sign malicious drivers
Title Cuba ransomware group used Microsoft developer accounts to sign malicious drivers
Detected Hints/Tags/Attributes 36/2/0
Source URLs
Redirection Url
Details Source https://www.csoonline.com/article/3683288/cuba-ransomware-group-used-microsoft-developer-accounts-to-sign-malicious-drivers.html#tk.rss_news
URL Provider
Details Provider Source level domain
Details csoonline.com www.csoonline.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08