GoodWill ransomware forces victims to donate to the poor and provides financial assistance to patients in need | Threat Intelligence | CloudSEK
Tags
country: India Turkey
attack-pattern: Data Direct Credentials - T1589.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Social Media - T1593.001 Social Media Accounts - T1585.001 Social Media Accounts - T1586.001 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID f86ef9e4-af35-4db8-8673-c827c2c8320e
Fingerprint b73248d9867386d8
Analysis status DONE
Considered CTI value 2
Text language
Published May 24, 2022, midnight
Added to db Feb. 17, 2023, 10:42 p.m.
Last updated Oct. 30, 2024, 3:21 a.m.
Headline GoodWill ransomware forces victims to donate to the poor and provides financial assistance to patients in need
Title GoodWill ransomware forces victims to donate to the poor and provides financial assistance to patients in need | Threat Intelligence | CloudSEK
Detected Hints/Tags/Attributes 55/2/14
Source URLs
Redirection Url
Details Source https://cloudsek.com/threatintelligence/goodwill-ransomware-forces-victims-to-donate-to-the-poor-and-provides-financial-assistance-to-patients-in-need
Details Source https://cloudsek.com/threatintelligence/goodwill-ransomware-forces-victims-to-donate-to-the-poor-and-provides-financial-assistance-to-patients-in-need/
URL Provider
Details Provider Source level domain
Details cloudsek.com cloudsek.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 89 ✔ CloudSEK Threat Intelligence https://cloudsek.com/threatintelligence/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 30 
ngrok.io
Details File 2 
new-goodwill-ransomware-victim-donate-poor-financial-help-needy-patients-cloudsek-13583332.htm
Details md5 2 
cea1cb418a313bdc8e67dbd6b9ea05ad
Details md5 22 
f34d5f2d4577ed6d9ceec516c1f5a744
Details sha1 2 
8d1af5b53c6100ffc5ebbfbe96e4822dc583dca0
Details sha256 2 
0facf95522637feaa6ea6f7c6a59ea4e6b7380957a236ca33a6a0dc82b70323c
Details IPv4 2 
3.109.48.136
Details IPv4 2 
13.235.50.147
Details Url 2 
https://metro.co.uk/2022/05/24/new-ransomware-demands-victims-donate-to-the-poor-to-unlock-their-data-16698304
Details Url 2 
https://economictimes.indiatimes.com/tech/technology/new-ransomware-makes-victim-donate-to-poor-financial-help-to-needy-patients/articleshow/91726417.cms
Details Url 2 
https://www.financialexpress.com/industry/technology/cyber-crime-or-forced-charity-goodwill-ransomware-makes-victim-donate-to-poor-financial-help-to-needy-patients/2533802
Details Url 2 
https://www.cnbctv18.com/information-technology/new-goodwill-ransomware-victim-donate-poor-financial-help-needy-patients-cloudsek-13583332.htm
Details Url 2 
https://www.businessinsider.in/tech/news/goodwill-ransomware-detected-in-india-makes-victim-donate-to-poor-provides-financial-help-to-needy-patients/amp_articleshow/91736850.cms
Details Url 2 
https://www.bgr.in/news/goodwill-ransomware-wants-you-to-help-needy-people-to-get-decryption-key-1274011