The Origins of APT 41 and ShadowPad Lineage
Introduction When the CYFIRMA research team began its work on tracking APT41, it became apparent that
Introduction When the CYFIRMA research team began its work on tracking APT41, it became apparent that
Matanbuchus Loader Report Date: 29-June-22 Author: Manoj Kumar (CYFIRMA-Malware Research Team) Suspected
AvosLocker Ransomware Report Suspected Malware: AvosLocker Malware Function: Ransomware Risk Score:
Threat Actor Profile Threat Actor: TA505 Alias: ATK 103, Chimborazo, Evil Corp, Gold Evergreen, Gold
Phishing Sample Analysis MD5 : 140F716E974CD7483EEAA380A9C4FD82 SHA1 : 4D5B17CA34D8D15FBAE65AB637919E13E72A3476
Recently Observed Campaigns The following list contains recent campaigns observed by CYFIRMA Threat
Yashma Ransomware Report Executive Summary: Yashma is a new ransomware seen in the wild since May
IOC Analysis of Russian threat actors Nobelium and Wizard Spider The Russian threat actors have been
Lazarus Group Recent Trends Recently Observed Campaigns The following list contains recent campaigns
Phishing Analysis A new phishing campaign by TA578 is uncovered that utilizes thread hijacked emails
Onyx Ransomware Report Suspected Malware: onyx Ransomware Function: Ransomware Risk Score: 8 Confidence
A new phishing campaign related to threat actor “Armageddon” was noticed earlier this month. The
Hermetic Wiper Malware Report Date: 04-April-22 Author: Dilpreet Singh Bajwa (Cyfirma-Malware Research
Doublezero Wiper Malware Report Date: 04-April-22 Author: Manoj Kumar (Cyfirma-Malware Research Team)
ShadowPad Malware Report Suspected Malware: ShadowPad Malware Function: Backdoor Risk Score: 8 Confidence
Emerging Cyber Threats in the Ongoing Russia-Ukraine Conflict Geopolitical Advisory [10 May 2022,
Out-of-Band Report – Tracking DangerousPassword Campaign by Lazarus Group Attack Type:
Risk Score: 8 Confidence Level: High. Suspected Malware: TimeTime Malware. Function: Ransomware. Threat
Supersuso is a ransomware intended to encrypt sensitive data in order to restrict access to it. During
BigLock is a ransomware discovered in 2020 and also known as “corona-lock.” It encrypts