SYMBOLCOMMON_NAMEaka. SYNONYMS
win.october_seventh (Back to overview)

OctoberSeventh

aka: ESET Wiper

Emanuele De Lucia summarizes that this wiper was sent to potential targets in phishing mails that impersonated ESET as a follow up to a breach of its Israeli distributor Comsecure.

References
2024-10-26 ⋅ Cyfox ⋅ Idan Malihi
ESET Wiper: Iranian APT Group Toufan’s Politically Motivated Attack on Israeli Firms
OctoberSeventh
2024-10-19 ⋅ Emanuele De Lucia on Security ⋅ Emanuele De Lucia
“Hey ESET, Wait for the Leak”: Dissecting the “OctoberSeventh” Wiper targeting ESET customers in Israel
OctoberSeventh

There is no Yara-Signature yet.