DeathGrip RaaS | Small-Time Threat Actors Aim High With LockBit & Yashma Builders
Aug. 9, 2024, 11:39 a.m.
Tags
External References
Description
This analysis examines the emergence of DeathGrip, a Ransomware-as-a-Service (RaaS) operation that provides threat actors with easy access to sophisticated ransomware builders like LockBit 3.0 and Yashma/Chaos. The accessibility of these tools enables even those with minimal technical skills to launch fully-developed ransomware attacks, posing a significant threat as the barrier to entry for extortion-focused cybercriminals continues to diminish. The proliferation of these tools contributes to the ongoing commoditization of ransomware across various capability levels.
Date
Published: Aug. 9, 2024, 11:19 a.m.
Created: Aug. 9, 2024, 11:19 a.m.
Modified: Aug. 9, 2024, 11:39 a.m.
Indicators
274844568a6a9ce334d71efeac21f528d7b54b2cd4377c978cc1270c6ad986c4
Attack Patterns
Chaos - S0220
Yashma
LockBit
DeathGrip
T1135
T1490
T1489
T1486
T1564
T1105
T1134
T1059