Tag: shamoon

2 Attack Reports | 0 Vulnerabilities

Attack reports

Analysis of the BlackJack group: techniques, tools, and similarities with Twelve

The report examines the BlackJack hacktivist group targeting Russian organizations, focusing on their tools, techniques, and connections to the Twelve group. BlackJack employs freely available software like the Shamoon wiper and LockBit ransomware. Significant overlaps with Twelve include similar m…
ransomware
lockbit
2024-09-25
shamoon
twelve
Published: September 25, 2024
Downloadable IOCs: 1

From initial compromise to ransomware and wipers

The Twelve group, formed in April 2023 amid the Russian-Ukrainian conflict, specializes in attacking Russian government organizations. Their attacks involve encrypting and deleting victims' data, causing maximum damage without seeking financial gain. The group uses publicly available tools like Cob…
cobalt strike
chaos
2024-09-23
facefish
lockbit 3.0
shamoon
Published: September 23, 2024
Downloadable IOCs: 20
Click here to see more Attack Reports