FIN6 Group Diversifies Activity, Uses LockerGoga and Ryuk Ransomware

guest · Apr 5, 2019

FIN6 Group Diversifies Activity, Uses LockerGoga and Ryuk Ransomware
April 5, 2019
https://www.bleepingcomputer.com/ne...activity-uses-lockergoga-and-ryuk-ransomware/

FIN6 cybercrime group has taken a step toward increased monetization of their intrusions and added ransomware to its portfolio, choosing LockerGoga and Ryuk file encryption malware for the extortion jobs.
Shifting business to increase monetization
Information from separate investigations on Ryuk and LockerGoga incidents allowed researchers to attribute the attacks to FIN6 or some of its members operating independently.

The companies that fell victim to the group's new extortion activities lost tens of millions of dollars, FireEye says in a blog post published today.

"Criminal operations and relationships are highly adaptable, so we commonly encounter such attribution challenges in regards to criminal activity. Given that these intrusions have been sustained for almost a year, we expect that continued research into further intrusion attempts may enable us to more fully answer these questions regarding FIN6’s current status," the researchers concluded.
Click to expand...

itman · Apr 7, 2019

No further reading needed after this:

Attack Lifecycle

Initial Compromise, Establish Foothold, and Escalate Privileges

To initially gain access to the environment, Managed Defense analysts identified that FIN6 compromised an internet facing system. Following the compromise of this system, analysts identified FIN6 leveraged stolen credentials to move laterally within the environment using the Windows’ Remote Desktop Protocol (RDP).
Click to expand...

https://www.fireeye.com/blog/threat-research/2019/04/pick-six-intercepting-a-fin6-intrusion.html

Log in or Sign up

FIN6 Group Diversifies Activity, Uses LockerGoga and Ryuk Ransomware

guest Guest

itman Registered Member

Log in or Sign up

FIN6 Group Diversifies Activity, Uses LockerGoga and Ryuk Ransomware

guest Guest

itman Registered Member

Useful Searches