mirror of
https://github.com/MISP/misp-galaxy.git
synced 2025-01-31 08:58:26 +00:00
commit
744ebaf3c0
1 changed files with 72 additions and 0 deletions
|
@ -8462,6 +8462,78 @@
|
||||||
"http://blog.trendmicro.com/trendlabs-security-intelligence/analyzing-fileless-code-injecting-sorebrect-ransomware/"
|
"http://blog.trendmicro.com/trendlabs-security-intelligence/analyzing-fileless-code-injecting-sorebrect-ransomware/"
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"value": "Cyron",
|
||||||
|
"description": "claims it detected \"Children Pornsites\" in your browser history",
|
||||||
|
"meta": {
|
||||||
|
"extensions": [
|
||||||
|
".CYRON"
|
||||||
|
],
|
||||||
|
"ransomnotes": [
|
||||||
|
"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2017/august/25/DHvA8CDWAAIR5er.jpg"
|
||||||
|
],
|
||||||
|
"refs": [
|
||||||
|
"https://twitter.com/struppigel/status/899524853426008064"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"value": "Kappa",
|
||||||
|
"description": "Made with OXAR builder; decryptable",
|
||||||
|
"meta": {
|
||||||
|
"extensions": [
|
||||||
|
".OXR"
|
||||||
|
],
|
||||||
|
"ransomnotes": [
|
||||||
|
"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2017/august/25/DHvDae7XoAE9usO[1].jpg"
|
||||||
|
],
|
||||||
|
"refs": [
|
||||||
|
"https://twitter.com/struppigel/status/899528477824700416"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"value": "Trojan Dz",
|
||||||
|
"description": "CyberSplitter variant",
|
||||||
|
"meta": {
|
||||||
|
"extensions": [
|
||||||
|
".Isis"
|
||||||
|
],
|
||||||
|
"ransomnotes": [
|
||||||
|
"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2017/august/25/DHvM552WsAAuDbi[1].jpg"
|
||||||
|
],
|
||||||
|
"refs": [
|
||||||
|
"https://twitter.com/struppigel/status/899537940539478016"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"value": "Xolzsec",
|
||||||
|
"description": "ransomware written by self proclaimed script kiddies that should really be considered trollware",
|
||||||
|
"meta": {
|
||||||
|
"extensions": [
|
||||||
|
".xolzsec"
|
||||||
|
],
|
||||||
|
"refs": [
|
||||||
|
"https://twitter.com/struppigel/status/899916577252028416"
|
||||||
|
]
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"value": "FlatChestWare",
|
||||||
|
"description": "HiddenTear variant; decryptable",
|
||||||
|
"meta": {
|
||||||
|
"extensions": [
|
||||||
|
".flat"
|
||||||
|
],
|
||||||
|
"ransomnotes": [
|
||||||
|
"https://www.bleepstatic.com/images/news/columns/week-in-ransomware/2017/august/25/DH5KChhXsAADOIu[1].jpg"
|
||||||
|
],
|
||||||
|
"refs": [
|
||||||
|
"https://twitter.com/struppigel/status/900238572409823232"
|
||||||
|
]
|
||||||
|
}
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
"source": "Various",
|
"source": "Various",
|
||||||
|
|
Loading…
Add table
Reference in a new issue