DeathGrip RaaS | Small-Time Threat Actors Aim High With LockBit & Yashma Builders

Aug. 9, 2024, 11:39 a.m.

Description

This analysis examines the emergence of DeathGrip, a Ransomware-as-a-Service (RaaS) operation that provides threat actors with easy access to sophisticated ransomware builders like LockBit 3.0 and Yashma/Chaos. The accessibility of these tools enables even those with minimal technical skills to launch fully-developed ransomware attacks, posing a significant threat as the barrier to entry for extortion-focused cybercriminals continues to diminish. The proliferation of these tools contributes to the ongoing commoditization of ransomware across various capability levels.

Date

Published Created Modified
Aug. 9, 2024, 11:19 a.m. Aug. 9, 2024, 11:19 a.m. Aug. 9, 2024, 11:39 a.m.

Indicators

274844568a6a9ce334d71efeac21f528d7b54b2cd4377c978cc1270c6ad986c4

Attack Patterns

Chaos - S0220

Yashma

LockBit

DeathGrip

T1135

T1490

T1489

T1486

T1564

T1105

T1134

T1059