Tag: ntlmthief

1 Attack Reports | 0 Vulnerabilities

Attack reports

Interlock and Rhysida within the Ransomware Ecosystem

This analysis examines over two years of observations on the ransomware ecosystem surrounding Interlock and Rhysida threat groups. Hive0163 (Interlock) employs custom malware including NodeSnake, InterlockRAT, JunkFiction downloader, Supper, and Interlock ransomware, with identified links to TAG-12…
ransomware
socgholish
vidar
sliver
latrodectus
gootloader
clickfix
systembc
rhysida
portstarter
initial access broker
interlock
trojanized installers
nodesnake
inc
broomstick
modelorat
interlockrat
mintloader
supper
CVE-2026-20131
2026-06-12
berserk stealer
CVE-2023-36036
dave
endico
icenova
junkfiction
mallard
ntlmthief
plus keylogger
supper backdoor
tomb
tomb crypter
Published: June 12, 2026
Linked vulnerabilities : CVE-2026-20131 (CVSS 10.0), CVE-2023-36036
Downloadable IOCs: 102
Click here to see more Attack Reports