Cl0p Ransomware: Global Threat To Businesses"
ID: 1dbbea27-1d57-5670-bad8-d1dc7a44bdfe
STIX ID: report--1dbbea27-1d57-5670-bad8-d1dc7a44bdfe
Feed Name: Cyble Blog
Threat Score
This report analyzes Cl0p ransomware operations and variants, detailing infection vectors (phishing, exposed RDP, exploit kits), multi-mode execution parameters, network share enumeration, encryption logic (RC4 key generation, RSA-wrapped keys), mutex and service behaviors, targeted industries and geography, listed IOCs (multiple hashes including an ELF variant), and recommended mitigations; it also notes a flawed Linux variant with a publicly available decryptor.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
