threatintel
actor tracker
IOC pivot
ioc · sha-256

5ba74a5693f4810a8eb9b9eeb1d69d943cf5bbc46f319a32802c23c7654194b0

RU · Russia8Baseconfidence · high

8Base ransom note dropped after Phobos-based encryption in the campaigns documented by VMware Carbon Black researchers.

family
Phobos
first seen
May 31, 2023
publisher
VMware Carbon Black
source citation