Tag: fog

2 Attack Reports | 0 Vulnerabilities

Attack reports

Fog Ransomware: Unusual Toolset Used in Recent Attack

A financial institution in Asia was targeted by Fog ransomware in May 2025, using an atypical toolset including legitimate employee monitoring software and open-source pentesting tools. The attackers deployed Syteca, GC2, Adaptix, and Stowaway, which are uncommon in ransomware attacks. They remaine…
espionage
data theft
persistence
lateral movement
CVE-2024-40711
fog ransomware
fog
asia
2025-06-12
unusual toolset
employee monitoring software
financial institution
pentesting tools
2025-06-17
Published: June 17, 2025
Linked vulnerabilities : CVE-2024-40711 (CVSS 9.8)
Downloadable IOCs: 0

Increased Fog and Akira Ransomware Activity Linked to SonicWall SSL VPN

Since early August, there has been a significant increase in Fog and Akira ransomware intrusions targeting SonicWall SSL VPN users across various industries. The attacks appear opportunistic rather than targeting specific sectors. All affected devices lacked patches for CVE-2024-40766. Initial acce…
ransomware
vpn
data exfiltration
akira
CVE-2024-40766
2024-10-24
sonicwall
initial access
fog
Published: October 24, 2024
Linked vulnerabilities : CVE-2024-40766 (CVSS 9.8)
Downloadable IOCs: 16
Click here to see more Attack Reports