Ransomfeed

Profilo, status e statistiche (dal 12-01-2020)

Dettaglio cyber gang

Profilo gang by OSINT sources: [source: 0]

Snatch is a ransomware which infects victims by rebooting the PC into Safe Mode. Most of the existing security protections do not run in Safe Mode so that it the malware can act without expected countermeasures and it can encrypt as many files as it finds. It uses common packers such as UPX to hide its payload.

Alerts:

Statistiche

N. rivendicazioni	2024	2023	2022
114	15	59	40

URLs

Fonte onion	Ultimo titolo	Status	Ultimo scrape	Versione Tor
hl66646wtlp2naoqnhattngigjp5palgqmbwixepcjyq5i534acgqyad.onion	News	🔴	02-11-2023	3
snatch.press	Access Denied	🔴	29-01-2023	0
snatchteam.top	News	🔴	13-09-2023	0
snatchteam.cc	Just a moment...	🟢	27-07-2024	0
snatchnews.top	Just a moment...	🟢	27-07-2024	0

Materiale utile

URL ricerca source: 0

https://blog.intel471.com/2020/05/21/a-brief-history-of-ta505/

https://github.com/albertzsigovits/malware-notes/blob/master/Snatch.md

https://intel471.com/blog/a-brief-history-of-ta505

https://news.sophos.com/en-us/2019/12/09/snatch-ransomware-reboots-pcs-into-safe-mode-to-bypass-protection/

https://news.sophos.com/en-us/2022/03/17/the-ransomware-threat-intelligence-center/

https://thedfirreport.com/2020/06/21/snatch-ransomware/

https://ti.qianxin.com/uploads/2020/02/13/cb78386a082f465f259b37dae5df4884.pdf

https://twitter.com/VK_Intel/status/1191414501297528832

https://www.bleepingcomputer.com/news/security/snatch-ransomware-reboots-to-windows-safe-mode-to-bypass-av-tools/

https://www.crowdstrike.com/blog/financial-motivation-drives-golang-malware-adoption/

https://www.cyborgsecurity.com/cyborg_labs/hunting-ransomware-inhibiting-system-backup-or-recovery/

https://www.secureworks.com/blog/ransomware-groups-use-tor-based-backdoor-for-persistent-access

Note di riscatto