Operation Emmental
Also reported as Retefe Gang and Retefe Group. Linked to Russia by three sources.
Reports per quarter
CVEs named in reports
- CVE-2017-5638 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor TrendLabs Security Intelligence BlogOSX Malware Linked to Operation Emmental Hijacks User Network Traffic - TrendLabs Security Intelligence Blog
Newest first. Details opens the report in Explore.