T1489 – Service Stop

Blog | Scenario

The Trigona ransomware
ByDetecteam 2023-10-112023-10-11

TLP TLP TLP CLEAR Author Jordi M. Lobo Summary The Trigona ransomware, emerging in late 2022, has rapidly evolved with continuous updates. By April 2023, it started targeting MSSQL servers through brute force methods. This threat is linked to the CryLock ransomware group and possibly ALPHV (BlackCat), though their involvement remains uncertain. The US and…

Read More The Trigona ransomware
Blog | Scenario

Clop – Ransomware by TA505
ByDetecteam 2023-06-222023-06-23

TLP TLP TLP CLEAR Author Jordi Lobo Summary Clop ransomware is a variant of a previously known strain called CryptoMix. In 2019, Clop was delivered as the final payload of a phishing campaign associated with the financially motivated actor TA505. In 2020, Clop has evolved from a ransomware delivered through malicious spam to one being…

Read More Clop – Ransomware by TA505

End of content

End of content