Ransomfeed

Profilo, status e statistiche (dal 12-01-2020)

Dettaglio cyber gang

Profilo gang by OSINT sources: [source: 0]

Babuk Ransomware is a sophisticated ransomware compiled for several platforms. Windows and ARM for Linux are the most used compiled versions, but ESX and a 32bit old PE executable were observed over time. as well It uses an Elliptic Curve Algorithm (Montgomery Algorithm) to build the encryption keys.

Alerts:

Statistiche

N. rivendicazioni	2024	2023	2022
0	0	0	0

URLs

Fonte onion	Ultimo titolo	Status	Ultimo scrape	Versione Tor
nq4zyac4ukl4tykmidbzgdlvaboqeqsemkp4t35bzvjeve6zm2lqcjid.onion	Babuk - Leaks site	🔴	26-02-2024	3

Materiale utile

URL ricerca source: 0

http://chuongdong.com/reverse%20engineering/2021/01/03/BabukRansomware/

https://blog.cyble.com/2022/05/06/rebranded-babuk-ransomware-in-action-darkangels-ransomware-performs-targeted-attack/

https://blog.morphisec.com/babuk-ransomware-variant-major-attack

https://blog.talosintelligence.com/2021/11/babuk-exploits-exchange.html

https://chuongdong.com/reverse%20engineering/2021/01/16/BabukRansomware-v3/

https://docs.google.com/spreadsheets/d/1MI8Z2tBhmqQ5X8Wf_ozv3dVjz5sJOs-3

https://github.com/EmissarySpider/ransomware-descendants

https://ke-la.com/new-russian-speaking-forum-a-new-place-for-raas/

https://killingthebear.jorgetesta.tech/actors/evil-corp

https://krebsonsecurity.com/2021/08/ransomware-gangs-and-the-name-game-distraction/

https://krebsonsecurity.com/2022/02/wazawaka-goes-waka-waka/

https://krebsonsecurity.com/2023/05/russian-hacker-wazawaka-indicted-for-ransomware/

https://lab52.io/blog/quick-review-of-babuk-ransomware-builder/

https://marcoramilli.com/2021/07/05/babuk-ransomware-the-builder/

https://medium.com/s2wlab/blackmatter-x-babuk-using-the-same-web-server-for-sharing-leaked-files-d01c20a74751

https://medium.com/s2wlab/groove-x-ramp-the-relation-between-groove-babuk-ramp-and-blackmatter-f75644f8f92d

https://medium.com/s2wlab/grooves-thoughts-on-blackmatter-babuk-and-interruption-in-the-supply-of-cheese-in-the-b5328bc764f2

https://medium.com/s2wlab/w1-jun-en-story-of-the-week-ransomware-on-the-darkweb-af491d33868b

https://medium.com/s2wlab/w4-jan-en-story-of-the-week-ransomware-on-the-darkweb-7595544363b1

https://medium.com/s2wlab/w4-may-en-story-of-the-week-ransomware-on-the-darkweb-5f5b8d4c3b6f

https://mssplab.github.io/threat-hunting/2023/06/15/malware-analysis-babuk.html

https://raw.githubusercontent.com/antonioCoco/infosec-talks/main/InsomniHack_2022_Ransomware_Encryption_Internals.pdf

https://raw.githubusercontent.com/vc0RExor/Malware-Threat-Reports/main/Ransomware/Babuk/Babuk_Ransomware_EN_2021_05.pdf

https://sebdraven.medium.com/babuk-is-distributed-packed-78e2f5dd2e62

https://securelist.com/ransomware-world-in-2021/102169/

https://sekurak.pl/udalo-nam-sie-zrealizowac-wywiad-z-grupa-ransomware-babuk-ktora-zaszyfrowala-policje-metropolitarna-w-waszyngtonie/

https://symantec.broadcom.com/hubfs/The_Ransomware_Threat_September_2021.pdf

https://therecord.media/builder-for-babuk-locker-ransomware-leaked-online/

https://twitter.com/GossiTheDog/status/1409117153182224386

https://twitter.com/Sebdraven/status/1346377590525845504

https://vulnerability.ch/2021/04/ransomware-and-date-leak-site-publication-time-analysis/

https://www.advintel.io/post/groove-vs-babuk-groove-ransom-manifesto-ramp-underground-platform-secret-inner-workings

https://www.bleepingcomputer.com/news/security/babuk-ransomware-is-back-uses-new-version-on-corporate-networks/

https://www.bleepingcomputer.com/news/security/babyk-ransomware-wont-hit-charities-unless-they-support-lgbt-blm/

https://www.bleepingcomputer.com/news/security/data-leak-marketplaces-aim-to-take-over-the-extortion-economy/

https://www.bleepingcomputer.com/news/security/leaked-babuk-locker-ransomware-builder-used-in-new-attacks/

https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-hacked-to-deploy-hive-ransomware/

https://www.bleepingcomputer.com/news/security/new-evil-corp-ransomware-mimics-payloadbin-gang-to-evade-us-sanctions/

https://www.crowdstrike.com/blog/big-game-hunting-on-the-rise-again-according-to-ecrime-index/

https://www.databreaches.net/babuk-re-organizes-as-payload-bin-offers-its-first-leak/

https://www.fr.sogeti.com/globalassets/france/avis-dexperts--livres-blancs/cybersecchronicles_-_babuk.pdf

https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/how-groove-gang-is-shaking-up-the-ransomware-as-a-service-market-to-empower-affiliates/

https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/is-there-really-such-a-thing-as-a-low-paid-ransomware-operator/

https://www.mcafee.com/blogs/other-blogs/mcafee-labs/are-virtual-machines-the-new-gold-for-cyber-criminals/

https://www.mcafee.com/enterprise/en-us/assets/reports/rp-babuk-moving-to-vm-nix-systems.pdf

https://www.mcafee.com/enterprise/en-us/assets/reports/rp-babuk-ransomware.pdf

https://www.splunk.com/en_us/blog/security/gone-in-52-seconds-and-42-minutes-a-comparative-analysis-of-ransomware-encryption-speed.html

https://www.splunk.com/en_us/pdfs/resources/whitepaper/an-empirically-comparative-analysis-of-ransomware-binaries.pdf

https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus/IOCs-blog-Ransomware%20Actor%20Abuses%20Genshin%20Impact%20Anti-Cheat%20Driver%20to%20Kill%20Antivirus.txt

https://www.trendmicro.com/en_us/research/21/b/new-in-ransomware.html

https://www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.html

https://www.zerofox.com/blog/babuk-ransomware-variant-delta-plus/

Note di riscatto