threatintel
actor tracker
IOC pivot
ioc · email

unlock[at]rsv-box[.]com

?? · UnknownCl0pconfidence · high

CL0P negotiation email address published in ransom notes during the MOVEit and GoAnywhere campaigns, listed in the email-address IOC table of AA23-158A.

family
CL0P
first seen
Jun 6, 2023
publisher
CISA
source citation