Worok
Linked to China by three sources.
Reports per quarter
Techniques seen in the last two years
- T1091 1 report
- T1190 1 report
- T1195 1 report
- T1557 1 report
- T1566.001 1 report
- T1566.002 1 report
- T1566.003 1 report
- T1659 1 report
Counts come from technique IDs in the actor's report text.
CVEs named in reports
- CVE-2020-35730 KEV
- CVE-2021-21551 KEV
- CVE-2021-26855 KEV ransomware
- CVE-2021-26857 KEV ransomware
- CVE-2021-27065 KEV ransomware
- CVE-2021-34523 KEV ransomware
- CVE-2021-44228 KEV ransomware
- CVE-2021-44515 KEV
- CVE-2021-45105
- CVE-2022-26352 KEV ransomware
- CVE-2022-27926 KEV
- CVE-2022-30190 KEV ransomware
Show all 20 CVEs Show fewer
- CVE-2022-42475 KEV ransomware
- CVE-2022-47966 KEV ransomware
- CVE-2023-23397 KEV
- CVE-2023-36884 KEV ransomware
- CVE-2023-38831 KEV ransomware
- CVE-2024-11182 KEV
- CVE-2024-49039 KEV ransomware
- CVE-2024-9680 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor ShadowPad (Malware Family)
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor MimiKatz (Malware Family)
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Worok- The big picture
Newest first. Details opens the report in Explore.