TA2719
Also reported as Vendetta. Linked to Turkey by one source.
Reports per quarter
CVEs named in reports
- CVE-2020-1472 KEV ransomware
- CVE-2021-21551 KEV
- CVE-2021-26855 KEV ransomware
- CVE-2021-26857 KEV ransomware
- CVE-2021-26858 KEV ransomware
- CVE-2021-27065 KEV ransomware
- CVE-2021-31207 KEV ransomware
- CVE-2021-34473 KEV ransomware
- CVE-2021-34523 KEV ransomware
- CVE-2022-26500 KEV ransomware
- CVE-2022-26501 KEV ransomware
- CVE-2022-26504
Show all 15 CVEs Show fewer
- CVE-2022-26522
- CVE-2022-26523
- CVE-2023-38831 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Nanocore RAT (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor AsyncRAT (Malware Family)
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware review- March 2023
-
In-Depth Analysis of Ransom Note Files
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor In-Depth Analysis of Ransom Note Files
-
RoboSki and Global Recovery- Automation to Combat Evolving Obfuscation
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor RoboSki and Global Recovery- Automation to Combat Evolving Obfuscation
-
Threat Actor Profile- TA2719 Uses Colorful Lures to Deliver RATs in Local Languages
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat Actor Profile- TA2719 Uses Colorful Lures to Deliver RATs in Local Languages
Show all 17 reports Show fewer
-
Vendetta-new-threat-actor-from-Europe
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Vendetta-new-threat-actor-from-Europe
-
Vendetta - new threat actor from Europe
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Vendetta - new threat actor from Europe
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MuddyWater expands operations
-
The link to CyberMonitor archive on GitHub failed its last check. CyberMonitor archive on GitHub Detailsfor MuddyWater expands operations
Newest first. Details opens the report in Explore.