SYMBOLCOMMON_NAMEaka. SYNONYMS
win.nitro (Back to overview)

win.nitro

aka: Hydra

Ransomware family which requires payment in Discord gift cards ("Discord Nitro").

References
2021-08-25 ⋅ Twitter (@malwrhunterteam) ⋅ MalwareHunterTeam
@online{malwarehunterteam:20210825:hydravariant:6583196, author = {MalwareHunterTeam}, title = {{Tweet on Hydra-variant with Dutch ransom note}}, date = {2021-08-25}, organization = {Twitter (@malwrhunterteam)}, url = {https://twitter.com/malwrhunterteam/status/1430616882231578624}, language = {English}, urldate = {2021-08-27} } Tweet on Hydra-variant with Dutch ransom note
win.nitro
2021-04-18 ⋅ Bleeping Computer ⋅ Lawrence Abrams
@online{abrams:20210418:discord:8787410, author = {Lawrence Abrams}, title = {{Discord Nitro gift codes now demanded as ransomware payments}}, date = {2021-04-18}, organization = {Bleeping Computer}, url = {https://www.bleepingcomputer.com/news/security/discord-nitro-gift-codes-now-demanded-as-ransomware-payments/}, language = {English}, urldate = {2021-08-26} } Discord Nitro gift codes now demanded as ransomware payments
win.nitro
2021-04-12 ⋅ Github (NightfallGT) ⋅ NightfallGT
@online{nightfallgt:20210412:nitro:03bef54, author = {NightfallGT}, title = {{Nitro Ransomware - Proof of Concept}}, date = {2021-04-12}, organization = {Github (NightfallGT)}, url = {https://github.com/nightfallgt/nitro-ransomware}, language = {English}, urldate = {2021-08-27} } Nitro Ransomware - Proof of Concept
win.nitro
2012-10-23 ⋅ Trend Micro ⋅ Nart Villeneuve, James T. Bennett
@techreport{villeneuve:20121023:detecting:6358dd0, author = {Nart Villeneuve and James T. Bennett}, title = {{Detecting APT Activity with Network Traffic Analysis}}, date = {2012-10-23}, institution = {Trend Micro}, url = {https://documents.trendmicro.com/assets/wp/wp-detecting-apt-activity-with-network-traffic-analysis.pdf}, language = {English}, urldate = {2022-03-07} } Detecting APT Activity with Network Traffic Analysis
Enfal Gh0stnet win.nitro sykipot taidoor

There is no Yara-Signature yet.