Trusselsaktør

The Gentlemen

TLP:CLEAR

Også kendt som: Storm-2697, GOLD SHERWOOD
Motiv: Økonomisk
Malware og værktøjer: ADFind, AnyDesk, BloodHound, Censys, CertiHound, Chisel-ng, Custom Go Locker (Windows/Linux/NAS), DumpBrowserSecrets, EDRStartupHinder, GFreeze, GLinker, gogo scanner
Teknikker (MITRE ATT&CK): Audio-Visual Content, Data Encrypted for Impact, Domains, Establish Accounts, Exploit Public-Facing Application, Exploitation for Privilege Escalation, Financial Theft, Invalid Code Signature, Masquerading, Match Legitimate Resource Name or Location, Remote Desktop Software, Remote System Discovery

Medlemmer får aktørens profil, de seneste hændelser og vores vurdering i dashboardet.

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.