Tag: telegram

6 attack reports | 0 vulnerabilities

Attack reports

Arsenal honed against Russia's government organizations

Published: October 11, 2024

Number of indicators: 25

loader government autoit telegram 2024-10-11 critical infrastructure sfx executables rar archives

Core Werewolf, a threat actor targeting Russia's defense industry and critical infrastructure since 2021, has evolved its tactics…

Key Group uses leaked builders of ransomware and wipers

Published: October 2, 2024

Number of indicators: 24

phishing ransomware persistence njrat wiper telegram chaos 2024-10-02 xorist slam hakuna matata annabelle ruransom ux-cryptor multi-stage loaders leaked builders russian-speaking judge/nocry

Key Group, also known as keygroup777, is a financially motivated ransomware group primarily targeting Russian users. The group ha…

Key Group: another ransomware group using leaked builders

Published: October 1, 2024

Number of indicators: 0

ransomware persistence njrat wiper github telegram chaos financially motivated 2024-10-01 xorist slam hakuna matata annabelle ruransom ux-cryptor multi-stage loaders leaked builders russian-speaking judge/nocry

Key Group is a financially motivated ransomware group primarily targeting Russian users. They use various leaked ransomware build…

A Comprehensive Analysis of Angry Stealer: Rage Stealer in a New Disguise

Published: August 28, 2024

Number of indicators: 2

infostealer exfiltration dropper rebranded telegram 2024-08-28 rage stealer angry stealer stepasha.exe motherrussia.exe

CYFIRMA's research team recently identified a sophisticated dropper binary designed to deploy an information stealer, dubbed 'Ang…

Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android

Published: July 23, 2024

Number of indicators: 1

malware exploit android vulnerability telegram 2024-07-23 android/spy.spymax.t

ESET researchers discovered a vulnerability named EvilVideo that allows attackers to share malicious Android payloads disguised a…

Braodo Info Stealer Targeting Vietnam and Abroad

Published: July 15, 2024

Number of indicators: 14

obfuscation stealer exfiltration 2024-07-15 telegram vietnam braodo stealer

CYFIRMA discovered Braodo Stealer, a Python-based malware active since early 2024, primarily targeting users in Vietnam but also …

» Click here to see all Attack Reports «