UNC2447
Reports per quarter
Techniques seen in the last two years
- T1003.001 1 report
- T1003.002 1 report
- T1003.003 1 report
- T1012 1 report
- T1021 1 report
- T1036.005 1 report
- T1048 1 report
- T1070 1 report
- T1071.001 1 report
- T1078 1 report
Show all 20 techniques Show fewer
Counts come from technique IDs in the actor's report text.
CVEs named in reports
- CVE-2021-20016 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor FiveHands (Malware Family)
-
Cisco Talos shares insights related to recent cyber attack on Cisco
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Cisco Talos shares insights related to recent cyber attack on Cisco
-
Conti Affiliate Exposed- New Domain Names, IP Addresses and Email Addresses Uncovered
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Conti Affiliate Exposed- New Domain Names, IP Addresses and Email Addresses Uncovered
-
Yanluowang ransomware operation matures with experienced affiliates
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Yanluowang ransomware operation matures with experienced affiliates
Show all 15 reports Show fewer
-
Advanced IP Scanner- the preferred scanner in the A(P)T toolbox
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Advanced IP Scanner- the preferred scanner in the A(P)T toolbox
-
Handy guide to a new Fivehands ransomware variant
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Handy guide to a new Fivehands ransomware variant
-
UNC2447 SOMBRAT and FIVEHANDS Ransomware- A Sophisticated Financial Threat
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor UNC2447 SOMBRAT and FIVEHANDS Ransomware- A Sophisticated Financial Threat
Newest first. Details opens the report in Explore.