MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Add Lockbit synonym

pull/763/head
Delta-Sierra 2022-09-07 11:00:41 +02:00
parent 775d3c183b
commit 77db2370b1
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
clusters/ransomware.json
View File

@ -14331,6 +14331,10 @@
{ {
"description": "LockBit operators tend to be very indiscriminate and opportunistic in their targeting. Actors behind this attack will use a variety of methods to gain initial access, up to and including basic methods such as brute force.\nAfter gaining initial access the actor follows a fairly typical escalation, lateral movement and ransomware execution playbook. LockBit operators tend to have a very brief dwell time, executing the final ransomware payload as quickly as they are able to. LockBit ransomware has the built-in lateral movement features; given adequate permissions throughout the targeted environment.", "description": "LockBit operators tend to be very indiscriminate and opportunistic in their targeting. Actors behind this attack will use a variety of methods to gain initial access, up to and including basic methods such as brute force.\nAfter gaining initial access the actor follows a fairly typical escalation, lateral movement and ransomware execution playbook. LockBit operators tend to have a very brief dwell time, executing the final ransomware payload as quickly as they are able to. LockBit ransomware has the built-in lateral movement features; given adequate permissions throughout the targeted environment.",
"meta": { "meta": {
"extensions": [
".abcd",
".LockBit"
],
"ransomnotes-filenames": [ "ransomnotes-filenames": [
"Restore-My-Files.txt" "Restore-My-Files.txt"
], ],
@ -14340,7 +14344,10 @@
"refs": [ "refs": [
"https://www.mcafee.com/blogs/other-blogs/mcafee-labs/tales-from-the-trenches-a-lockbit-ransomware-story/", "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/tales-from-the-trenches-a-lockbit-ransomware-story/",
"https://usa.kaspersky.com/resource-center/threats/lockbit-ransomware" "https://usa.kaspersky.com/resource-center/threats/lockbit-ransomware"
], "synonyms": ["ABCD ransomware"] ],
"synonyms": [
"ABCD ransomware"
]
}, },
"uuid": "8eda8bf1-db5a-412d-8511-45e2f7621d51", "uuid": "8eda8bf1-db5a-412d-8511-45e2f7621d51",
"value": "LockBit" "value": "LockBit"