SYMBOLCOMMON_NAMEaka. SYNONYMS
win.evilnum (Back to overview)

EVILNUM

There is no description at this point.

References
2022-07-21 ⋅ Proofpoint ⋅ Bryan Campbell, Pim Trouerbach, Selena Larson, Proofpoint Threat Research Team
@online{campbell:20220721:buy:bf7d3c4, author = {Bryan Campbell and Pim Trouerbach and Selena Larson and Proofpoint Threat Research Team}, title = {{Buy, Sell, Steal, EvilNum Targets Cryptocurrency, Forex, Commodities}}, date = {2022-07-21}, organization = {Proofpoint}, url = {https://www.proofpoint.com/us/blog/threat-insight/buy-sell-steal-evilnum-targets-cryptocurrency-forex-commodities}, language = {English}, urldate = {2022-07-25} } Buy, Sell, Steal, EvilNum Targets Cryptocurrency, Forex, Commodities
EVILNUM
2022-06-27 ⋅ Zscaler ⋅ Sudeep Singh, Sahil Antil
@online{singh:20220627:return:a09268a, author = {Sudeep Singh and Sahil Antil}, title = {{Return of the Evilnum APT with updated TTPs and new targets}}, date = {2022-06-27}, organization = {Zscaler}, url = {https://www.zscaler.com/blogs/security-research/return-evilnum-apt-updated-ttps-and-new-targets}, language = {English}, urldate = {2022-06-29} } Return of the Evilnum APT with updated TTPs and new targets
EVILNUM EVILNUM
2021-10-26 ⋅ Symantec ⋅ Symantec
@online{symantec:20211026:ransom:424b898, author = {Symantec}, title = {{Ransom and Malware Attacks on Financial Services Institutions}}, date = {2021-10-26}, organization = {Symantec}, url = {https://docs.broadcom.com/doc/ransom-and-malware-attacks-on-financial-services-institutions}, language = {English}, urldate = {2022-08-31} } Ransom and Malware Attacks on Financial Services Institutions
EVILNUM
2021-06-16 ⋅ Microstep Online Research Response Center ⋅ Ring-1
@online{ring1:20210616:evilnum:013580d, author = {Ring-1}, title = {{Evilnum organizes recent attacks against European financial companies}}, date = {2021-06-16}, organization = {Microstep Online Research Response Center}, url = {https://mp.weixin.qq.com/s/lryl3a65uIz1AwZcfuzp1A}, language = {Chinese}, urldate = {2021-06-21} } Evilnum organizes recent attacks against European financial companies
EVILNUM
2020-07-10 ⋅ Github (eset) ⋅ Matías Porolli
@online{porolli:20200710:evilnumindicators:639ec06, author = {Matías Porolli}, title = {{Evilnum — Indicators of Compromise}}, date = {2020-07-10}, organization = {Github (eset)}, url = {https://github.com/eset/malware-ioc/tree/master/evilnum}, language = {English}, urldate = {2020-07-11} } Evilnum — Indicators of Compromise
EVILNUM More_eggs EVILNUM TerraStealer
2020-07-09 ⋅ ESET Research ⋅ Matías Porolli
@online{porolli:20200709:more:24d8b63, author = {Matías Porolli}, title = {{More evil: A deep look at Evilnum and its toolset}}, date = {2020-07-09}, organization = {ESET Research}, url = {https://www.welivesecurity.com/2020/07/09/more-evil-deep-look-evilnum-toolset/}, language = {English}, urldate = {2020-07-11} } More evil: A deep look at Evilnum and its toolset
EVILNUM More_eggs EVILNUM TerraPreter TerraStealer TerraTV Evilnum
2019-03-19 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster, Josh Grunzweig
@online{lancaster:20190319:cardinal:b75240f, author = {Tom Lancaster and Josh Grunzweig}, title = {{Cardinal RAT Sins Again, Targets Israeli Fin-Tech Firms}}, date = {2019-03-19}, organization = {Palo Alto Networks Unit 42}, url = {https://unit42.paloaltonetworks.com/cardinal-rat-sins-again-targets-israeli-fin-tech-firms/}, language = {English}, urldate = {2020-01-13} } Cardinal RAT Sins Again, Targets Israeli Fin-Tech Firms
EVILNUM Cardinal RAT EVILNUM

There is no Yara-Signature yet.