Overview: Emerged in March 2022, highly active since June 2023. Targets various industries, especially small and medium businesses. Uses double extortion tactics (encrypts files and steals data).
Encryption Technique: Appends ".8base" extension to encrypted files. Suggests use of Ransomware-as-a-Service (RaaS).
Indicators of Compromise (IOCs): Specific details like file names, registry entries, or network communication can be found in security reports. Look for resources like "https://www.provendata.com/"
top of page
bottom of page
Comentarios