Orangeworm
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2017-0199 KEV ransomware
- CVE-2017-11882 KEV ransomware
- CVE-2018-13379 KEV ransomware
- CVE-2019-10149 KEV
- CVE-2019-11510 KEV ransomware
- CVE-2019-1652 KEV
- CVE-2019-1653 KEV
- CVE-2019-19781 KEV ransomware
- CVE-2019-9670 KEV
- CVE-2020-0601 KEV
- CVE-2020-0796 KEV ransomware
- CVE-2020-10189 KEV
Show all 13 CVEs Show fewer
- CVE-2020-1472 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Threat Group Cards: A Threat Actor Encyclopedia
-
Researchers Find New Evidence Linking Kwampirs Malware to Shamoon APT Hackers
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Researchers Find New Evidence Linking Kwampirs Malware to Shamoon APT Hackers
-
report-bb-2021-threat-report.pdf
The original link failed its last check. Original publisher Detailsfor report-bb-2021-threat-report.pdf
-
Group-IB_Hi-Tech_Crime_Trends_2020-2021_en
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_Hi-Tech_Crime_Trends_2020-2021_en
Show all 23 reports Show fewer
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Unpacking the Kwampirs RAT
-
FBI warns about ongoing attacks against software supply chain companies
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor FBI warns about ongoing attacks against software supply chain companies
-
ORANGEWORM GROUP – KWAMPIRS ANALYSIS UPDATE - Security Art Work
The original link failed its last check. Original publisher Detailsfor ORANGEWORM GROUP – KWAMPIRS ANALYSIS UPDATE - Security Art Work
-
ORANGEWORM GROUP – KWAMPIRS ANALYSIS UPDATE
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor ORANGEWORM GROUP – KWAMPIRS ANALYSIS UPDATE
-
New Orangeworm attack group targets the healthcare sector in the U.S., Europe, and Asia
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor New Orangeworm attack group targets the healthcare sector in the U.S., Europe, and Asia
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor New Orangeworm attack group targets the healthcare sector in the U.S., Europe, and Asia | Symantec Blogs
Newest first. Details opens the report in Explore.