Roaming Mantis
Also reported as Roaming Mantis Group and Shaoye.
Reports per quarter
CVEs named in reports
- CVE-2007-5633
- CVE-2009-0824
- CVE-2010-1592
- CVE-2013-2618
- CVE-2014-8361 KEV
- CVE-2015-1805
- CVE-2015-5119 KEV
- CVE-2015-7755 KEV
- CVE-2016-0189 KEV ransomware
- CVE-2016-10401
- CVE-2016-3353
- CVE-2017-0143 KEV ransomware
Show all 44 CVEs Show fewer
- CVE-2017-0144 KEV ransomware
- CVE-2017-0176
- CVE-2017-0199 KEV ransomware
- CVE-2017-1000353 KEV
- CVE-2017-10271 KEV ransomware
- CVE-2017-11467
- CVE-2017-11882 KEV ransomware
- CVE-2017-12629
- CVE-2017-17215
- CVE-2017-5638 KEV ransomware
- CVE-2017-7269 KEV
- CVE-2017-8570 KEV
- CVE-2017-9822 KEV ransomware
- CVE-2018-0101
- CVE-2018-0171 KEV
- CVE-2018-0296 KEV
- CVE-2018-10088
- CVE-2018-10561 KEV
- CVE-2018-10562 KEV ransomware
- CVE-2018-11776 KEV
- CVE-2018-15454
- CVE-2018-15961 KEV
- CVE-2018-2628 KEV
- CVE-2018-2893
- CVE-2018-4878 KEV ransomware
- CVE-2018-5002 KEV
- CVE-2018-7600 KEV ransomware
- CVE-2018-7602 KEV ransomware
- CVE-2018-8453 KEV ransomware
- CVE-2018-8589 KEV
- CVE-2018-9866
- CVE-2019-1367 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Roaming Mantis - Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Roaming Mantis - Threat Group Cards: A Threat Actor Encyclopedia
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor MoqHao (Malware Family)
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Moqhao masters new tricks
Show all 37 reports Show fewer
-
The original link failed its last check. Original publisher Detailsfor Moqhao masters new tricks
-
MoqHao Part 3- Recent Global Targeting Trends
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MoqHao Part 3- Recent Global Targeting Trends
-
MoqHao Android malware analysis and phishing campaign
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MoqHao Android malware analysis and phishing campaign
-
Ongoing Roaming Mantis smishing campaign targeting France
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ongoing Roaming Mantis smishing campaign targeting France
-
MoqHao Part 2- Continued European Expansion
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MoqHao Part 2- Continued European Expansion
-
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Roaming Mantis reaches Europe
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Roaming Mantis reaches Europe
-
MoqHao Part 1.5- High-Level Trends of Recent Campaigns Targeting Japan
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MoqHao Part 1.5- High-Level Trends of Recent Campaigns Targeting Japan
-
Roaming Mantis Amplifies Smishing Campaign with OS-Specific Android Malware
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Roaming Mantis Amplifies Smishing Campaign with OS-Specific Android Malware
-
Roaming Mantis, part V- Distributed in 2019 using SMiShing and enhanced anti-researcher techniques
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Roaming Mantis, part V- Distributed in 2019 using SMiShing and enhanced anti-researcher techniques
-
MoqHao Related Android Spyware Targeting Japan and Korea Found on Google Play
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MoqHao Related Android Spyware Targeting Japan and Korea Found on Google Play
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor 2018 Master Table
-
2018_ A Year of Cyber Attacks – HACKMAGEDDON
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor 2018_ A Year of Cyber Attacks – HACKMAGEDDON
-
Roaming Mantis Group Testing Coinhive Miner Redirects on iPhones
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Roaming Mantis Group Testing Coinhive Miner Redirects on iPhones
-
Attackers Behind GozNym Trojan Set Sights on Europe
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Attackers Behind GozNym Trojan Set Sights on Europe
Newest first. Details opens the report in Explore.