Tag: hellcat

2 Attack Reports | 0 Vulnerabilities

Attack reports

10 Things I Hate About Attribution: RomCom vs. TransferLoader

This report analyzes the activities of two threat actor clusters: TA829 and UNK_GreenSec. TA829 conducts both espionage and cybercrime operations using tools like SingleCamper and DustyHammock. UNK_GreenSec deploys TransferLoader malware leading to ransomware infections. The actors share similariti…
ransomware
romcom
singlecamper
dustyhammock
shadyhammock
rustyclaw
meltingclaw
hellcat
morpheus
transferloader
2025-07-01
slipscreen
Published: July 1, 2025
Downloadable IOCs: 103

Two Brands, One Payload as Ransomware Affiliates Drop Identical Code

Recent months have seen increased activity in new ransomware operations, including HellCat and Morpheus. Analysis of payloads from both operations reveals that affiliates are using almost identical code. The ransomware samples, uploaded to VirusTotal in December 2024, share similarities in behavior…
ransomware
raas
2025-01-23
hellcat
morpheus
Published: January 23, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports