Ransomware.live - Group : Clop

Ransomware Group:

Clop

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

The ransomware group known as Cl0p is a variant of a previously known strain dubbed CryptoMix. It is worth noting that this variant was delivered as the final payload in a phishing campaign in 2019 and was exclusively financially motivated, with attacks carried out by the threat actors TA505.

At that time, malicious actors sent phishing emails that led to a macro-enabled document that would drop a loader called 'Get2.' After gaining an initial foothold in the system or infrastructure, the actors began using reconnaissance, lateral movement, and exfiltration techniques to prepare for the deployment of the ransomware.

After the execution of the ransomware, Cl0p appends the extension '.clop' to the end of files, or other types of extensions such as '.CIIp, .Cllp, and .C_L_O_P,' as well as different versions of the ransom note that were also observed after encryption. Depending on the variant, any of the ransom text files were created with names like 'ClopReadMe.txt, README_README.txt, Cl0pReadMe.txt, and READ_ME_!!!.TXT.'

The Clop operation has shifted from delivering its final payload via phishing and has begun initiating attacks using vulnerabilities that resulted in the exploitation and infection of victims' infrastructures.
Source: https://github.com/crocodyli/ThreatActors-TTPs

Sites

Title	Available	Last Visit	FQDN	Screenshot
None	🔴	2021-05-01 00:00:00.000000	ekbgzchl6x2ias37.onion	N/A
Access Queue	🟢	2024-12-03 15:48:21.105718	santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion	📸
TORRENT \| CL0P^_- LEAKS	🔴	2024-07-15 19:46:11.508010	toznnag5o3ambca56s2yacteu7q7x2avrfherzmz4nmujrjuib4iusad.onion	N/A

Yara Rules

Click here to open yara rules

TTPs

Click here to see TTPs

Vulnerabilities

Click here to see vulnerabilities

Ransom Note(s)

Click here to see Ransom Note(s)

Activity over time

Worldmap

540 Victims

HUBBARDHALL.COM

Ransomware Group:

Discovery Date: 2024-10-25 07:02

Sector: Manufacturing

Victim: | Group:

SPECTRUMCHEMICAL.COM

Ransomware Group:

Discovery Date: 2024-10-19 16:19

Sector: Manufacturing

Victim: | Group:

FULTON.COM

Ransomware Group:

Discovery Date: 2024-10-09 09:36

Sector: Financial Services

Fulton - A Worldwide Leader in Heat Transfer Equipment and Innovations

Victim: | Group:

HARTSON-KENNEDY.COM

Ransomware Group:

Discovery Date: 2024-10-05 11:16

Sector: Manufacturing

At Hartson-Kennedy, we simply translate that ideal into one word: quality. Quality materials. Quality spaces. Quality living.

Victim: | Group:

LIFTING.COM

Ransomware Group:

Discovery Date: 2024-10-03 08:57

Sector: Consumer Services

The nation's largest rigging equipment supplier with coast-to-coast coverage. Buy Rigging Equipment & Rigging Supplies Online at the Best Prices.

Victim: | Group:

ORCHID-ORTHO.COM

Ransomware Group:

Discovery Date: 2024-09-14 08:36

Sector: Healthcare

Victim: | Group:

SOLOMONUS.COM

Ransomware Group:

Discovery Date: 2024-07-25 12:11

Sector: Not Found

_URL_

Victim: | Group:

CIFSOLUTIONS.COM

Ransomware Group:

Discovery Date: 2024-06-23 10:09

Sector: Technology

Victim: | Group:

NJORALSURGERY.COM

Ransomware Group:

Discovery Date: 2024-06-12 06:54

Sector: Healthcare

Victim: | Group:

UNICRED.COM.AR

Ransomware Group:

Discovery Date: 2024-05-30 14:56

Sector: Financial Services

Unicred - Cooperativa de Credito y Vivienda

Victim: | Group:

EMPIRECOMFORT.COM

Ransomware Group:

Discovery Date: 2024-05-24 14:46

Sector: Consumer Services

Home - Empire Comfort Systems

Victim: | Group:

PRIMARYSYS.COM

Ransomware Group:

Discovery Date: 2024-05-17 07:23

Sector: Technology

Home - My Site

Victim: | Group:

COMPEXLEGAL.COM

Ransomware Group:

Discovery Date: 2024-05-04 18:49

Sector: Business Services

The #1 Medical Record Retrieval Service - Compex Legal Services

Victim: | Group:

PINNACLEENGR.COM

Ransomware Group:

Discovery Date: 2024-05-01 10:27

Sector: Construction

Pinnacle Engineering - Your Partner in Offshore Success

Victim: | Group:

MCKINLEYPACKAGING.COM

Ransomware Group:

Discovery Date: 2024-05-01 10:26

Sector: Manufacturing

McKinley Packaging

Victim: | Group:

PILOTPEN.COM

Ransomware Group:

Discovery Date: 2024-05-01 10:26

Sector: Consumer Services

Welcome To Pilot Pen Global Landing Page

Victim: | Group:

HUDSONBUSSALES.COM

Ransomware Group:

Discovery Date: 2024-03-16 16:41

Sector: Transportation/Logistics

Hudson Bus Sales - New & Used Bus Sales, Rentals, Sales, Service, and Parts with locations in Cleburne, TX and Orlando, FL

Victim: | Group:

SJCME.EDU

Ransomware Group:

Discovery Date: 2024-03-05 15:25

Sector: Not Found

Saint Joseph's College of Maine - Maine College + Online Learning

Victim: | Group:

THAISUMMIT.US

Ransomware Group:

Discovery Date: 2024-03-03 17:39

Sector: Manufacturing

Thai Summit America - World Class Precision Metal Stampings & Assemblies

Victim: | Group:

THESAFIRCHOICE.COM

Ransomware Group:

Discovery Date: 2024-03-03 17:38

Sector: Construction

Home - Safir Law

Victim: | Group:

PEDDIE.ORG

Ransomware Group:

Discovery Date: 2024-02-26 22:10

Sector: Not Found

Co-Ed Boarding & Day School in NJ - The Peddie School

Victim: | Group:

BRADSHAW-MEDICAL.COM

Ransomware Group:

Discovery Date: 2024-02-26 22:09

Sector: Healthcare

Victim: | Group:

BRONSTEIN-CARMONA.COM

Ransomware Group:

Discovery Date: 2024-02-16 17:39

Sector: Not Found

Fort Lauderdale Insurance Defense Law - Bronstein & Carmona

Victim: | Group:

SANDALAWOFFICES.COM

Ransomware Group:

Discovery Date: 2024-01-24 16:13

Sector: Business Services

Home Page - S&A Law Offices

Victim: | Group:

DELPHINUS.COM

Ransomware Group:

Discovery Date: 2024-01-01 19:35

Sector: Healthcare

Victim: | Group:

DSG-US.COM

Ransomware Group:

Discovery Date: 2023-12-16 17:21

Sector:

DSG Clinical Trial Software and Data Management Solutions

Victim: | Group:

NCCU.EDU

Ransomware Group:

Discovery Date: 2023-11-29 14:54

Sector:

Attention Required! - Cloudflare

Victim: | Group:

SWISHSMILES.COM

Ransomware Group:

Discovery Date: 2023-11-25 14:15

Sector:

Austin, TX Dental Services for the Whole Family - Swish Dental®️

Victim: | Group:

TXWES.EDU

Ransomware Group:

Discovery Date: 2023-11-25 14:14

Sector:

Home - Texas Wesleyan University

Victim: | Group:

SWEETLAKE.COM

Ransomware Group:

Discovery Date: 2023-11-25 14:14

Sector:

Victim: | Group:

SGMGROUP.COM

Ransomware Group:

Discovery Date: 2023-11-25 14:13

Sector:

Victim: | Group:

MORSKATEMANUFACTURING.COM

Ransomware Group:

Discovery Date: 2023-11-25 14:13

Sector:

Morskate Manufacturing – Metal Fabricator

Victim: | Group:

SMWLLC.COM

Ransomware Group:

Discovery Date: 2023-09-22 22:17

Sector:

SM&W - Acoustic, Audiovisual & Technology Design Consultants

Victim: | Group:

vitalitygroup.com

Ransomware Group:

Discovery Date: 2023-08-31 05:30

Sector:

Vitality: Engagement Platform That Works - Wellness Solutions

Victim: | Group:

infinigate.ch

Ransomware Group:

Discovery Date: 2023-08-29 10:00

Sector:

Infinigate - Ihr Value-Added Distributor für Cyber Security

Victim: | Group:

digitalinsight.no

Ransomware Group:

Discovery Date: 2023-08-23 14:24

Sector:

Digital Insight AS – The Future is Digital – Insight is key!

Victim: | Group:

MBO-PPS.COM

Ransomware Group:

Discovery Date: 2023-08-17 09:13

Sector:

MBO Gruppe

Victim: | Group:

MBOAMERICA.COM

Ransomware Group:

Discovery Date: 2023-08-17 09:13

Sector:

Home - MBO America

Victim: | Group:

KOMORI.COM

Ransomware Group:

Discovery Date: 2023-08-17 09:12

Sector:

KOMORI Corporation

Victim: | Group:

SHERMAN.EDU

Ransomware Group:

Discovery Date: 2023-08-02 11:06

Sector:

Chiropractic School - Sherman College of Chiropractic - Spartanburg, SC

Victim: | Group:

MACOM.COM

Ransomware Group:

Discovery Date: 2023-07-26 21:01

Sector:

Home

Victim: | Group:

KALEPW.COM

Ransomware Group:

Discovery Date: 2023-07-26 21:00

Sector:

Victim: | Group:

DATAENGINE.EU

Ransomware Group:

Discovery Date: 2023-07-26 21:00

Sector:

DataEngine - this is us

Victim: | Group:

SAUL.ORG.UK

Ransomware Group:

Discovery Date: 2023-07-26 20:59

Sector:

Core

Victim: | Group:

CCED.COM.OM

Ransomware Group:

Discovery Date: 2023-07-26 20:59

Sector:

CC Energy Development - Working together to unlock Oman's oil and gas potential

Victim: | Group:

VIRGINPULSE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:59

Sector:

Virgin Pulse - Changing Lives for Good - Virgin Pulse

Victim: | Group:

ACLARA.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:58

Sector:

Aclara Technologies LLC

Victim: | Group:

QUARK.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:58

Sector:

Quark Software, Inc. - Modern Content Lifecycle Management

Victim: | Group:

INFINIGATE.CH (INFINIGATE.CO.UK)

Ransomware Group:

Discovery Date: 2023-07-26 20:57

Sector:

Victim: | Group:

INFORMATICA.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:57

Sector:

Enterprise Cloud Data Management - Informatica

Victim: | Group:

ALOHACARE.ORG

Ransomware Group:

Discovery Date: 2023-07-26 20:57

Sector:

Victim: | Group:

SOFTTECH.NL

Ransomware Group:

Discovery Date: 2023-07-26 20:56

Sector:

Home - SoftTech voor Managed Services en Softwareontwikkeling

Victim: | Group:

ALOGENT.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:56

Sector:

Alogent: Digital Banking, Enterprise Check Processing Software, & Process Automation Solutions for Banks & Credit Unions

Victim: | Group:

CONVERGEONE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:55

Sector:

Connected Customer Experiences - ConvergeOne

Victim: | Group:

AMERISAVE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:55

Sector:

Low Mortgage Rates & Quick Approvals - AmeriSave

Victim: | Group:

KELLYSERVICES.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:54

Sector:

Staffing Agencies - Workforce & Staffing Solutions by Kelly Services

Victim: | Group:

HUBBELL.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:54

Sector:

Hubbell - Homepage

Victim: | Group:

ALEKTUM.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:54

Sector:

Alektum Group - Improve cash flow and long-term profitability

Victim: | Group:

HOERMANN-GRUPPE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:53

Sector:

Startseite - HÖRMANN Gruppe

Victim: | Group:

SALELYTICS.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:53

Sector:

Salelytics - Inside Sales and Account Management

Victim: | Group:

FLUTTER.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:52

Sector:

Home - Flutter Entertainment plc

Victim: | Group:

ENTERPRISEBANKING.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:52

Sector:

Enterprise Bank

Victim: | Group:

MECHANICSBANK.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:52

Sector:

Mechanics Bank - Mechanics Bank

Victim: | Group:

TRICOPRODUCTS.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:51

Sector:

TRICO® Windshield Wipers - Find Your Vehicle's Wiper Blade Size

Victim: | Group:

JONESLANGLASALLE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:51

Sector:

Conseil en immobilier d'entreprise - Investissements et services - JLL France

Victim: | Group:

ARISTOCRAT.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:50

Sector:

A global gaming & technology company - Aristocrat Leisure Limited

Victim: | Group:

ADARESEC.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:50

Sector:

Adare SEC - Customer Communication (CCM)

Victim: | Group:

TTIGROUP.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:50

Sector:

Cordless Power Tools Leader - Techtronic Industries TTI

Victim: | Group:

CHUCKECHEESE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:49

Sector:

Chuck E. Cheese: Kids Birthday Parties, Pizza & Arcade Games

Victim: | Group:

DELOITTE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:49

Sector:

Deloitte France - Audit, Consulting, Financial Advisory, Risk Advisory, Juridique & Fiscal, Expertise comptable

Victim: | Group:

SIU.EDU

Ransomware Group:

Discovery Date: 2023-07-26 20:48

Sector:

Southern Illinois University

Victim: | Group:

WSP.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:48

Sector:

Nous sommes WSP - WSP

Victim: | Group:

SAFILOGROUP.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:48

Sector:

Victim: | Group:

SLEEPCOUNTRY.CA

Ransomware Group:

Discovery Date: 2023-07-26 20:47

Sector:

Victim: | Group:

PLANETHOMELENDING.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:47

Sector:

Planet Home Lending - We'll Get You Home.

Victim: | Group:

TOYOTA-BOSHOKU.BE

Ransomware Group:

Discovery Date: 2023-07-26 20:46

Sector:

Toyota Boshoku Europe N.V.

Victim: | Group:

DDCOS.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:46

Sector:

Expert Outsourcing Company - DDC Outsourcing

Victim: | Group:

THEVITALITYGROUP.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:46

Sector:

Victim: | Group:

METROBANK.COM.PH

Ransomware Group:

Discovery Date: 2023-07-26 20:45

Sector:

You're in Good Hands - Metrobank

Victim: | Group:

GENESISENERGY.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:45

Sector:

A Midstream Services Provider. - Genesis Energy, LP

Victim: | Group:

GNC.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:44

Sector:

Victim: | Group:

INFORMA.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:44

Sector:

Home

Victim: | Group:

EMSBILLING.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:43

Sector:

Just a moment...

Victim: | Group:

AWAZE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:43

Sector:

Awaze - Homepage

Victim: | Group:

PAYBACK.GROUP

Ransomware Group:

Discovery Date: 2023-07-26 20:43

Sector:

PAYBACK GROUP: Home

Victim: | Group:

GARRETTMOTION.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:42

Sector:

Garrett Motion / Turbo Technology / Electric & Hybrid / Connected Vehicle

Victim: | Group:

SMURFITKAPPA.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:42

Sector:

Smurfit Kappa - Paper - Packaging - Solutions

Victim: | Group:

MCW.EDU

Ransomware Group:

Discovery Date: 2023-07-26 20:41

Sector:

Home - Medical College of Wisconsin

Victim: | Group:

GOALSOLUTIONS.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:41

Sector:

Loan Servicing and Asset Management - Goal Solutions

Victim: | Group:

GENSLER.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:40

Sector:

Gensler - Creating a Better World Through the Power of Design

Victim: | Group:

HINDUJAGROUP.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:40

Sector:

Hinduja Group Ltd.

Victim: | Group:

FANUCAMERICA.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:40

Sector:

FANUC America - Automation Solutions that Redefine Productivity

Victim: | Group:

CHEVRONFCU.ORG

Ransomware Group:

Discovery Date: 2023-07-26 20:39

Sector:

Chevron Federal Credit Union

Victim: | Group:

FERRING.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:39

Sector:

403 Forbidden

Victim: | Group:

SBMOFFSHORE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:38

Sector:

Homepage - SBM Offshore

Victim: | Group:

CAP.ORG

Ransomware Group:

Discovery Date: 2023-07-26 20:38

Sector:

Homepage - College of American Pathologists

Victim: | Group:

QBITS.CH

Ransomware Group:

Discovery Date: 2023-07-26 20:38

Sector:

QBITS AG - Home

Victim: | Group:

MESVISION.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:37

Sector:

MESVision Members

Victim: | Group:

PBINFO.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:37

Sector:

Locate Missing Participants - Death Audit - PBI Research Services

Victim: | Group:

HALLMARKCHANNEL.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:36

Sector:

Victim: | Group:

MAXIMUS.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:36

Sector:

Moving people forward - Maximus

Victim: | Group:

ARROW.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:35

Sector:

Victim: | Group:

AJOOMAL.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:35

Sector:

Victim: | Group:

DRYDOCKS.GOV.AE

Ransomware Group:

Discovery Date: 2023-07-26 20:34

Sector:

Drydocks World

Victim: | Group:

HILLROM.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:34

Sector:

Advancing Connected Care - Hillrom

Victim: | Group:

PRO2COL.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:33

Sector:

Pro2col: Secure Managed File Transfer (MFT) Software Experts UK

Victim: | Group:

ENCOREANYWHERE.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:33

Sector:

Welcome to EncoreAnywhere

Victim: | Group:

AMF.SE

Ransomware Group:

Discovery Date: 2023-07-26 20:33

Sector:

AMF - Pensionen från jobbet - amf.se

Victim: | Group:

ORAU.ORG

Ransomware Group:

Discovery Date: 2023-07-26 20:32

Sector:

Oak Ridge Associated Universities - ORAU

Victim: | Group:

AGILYSYSAP.COM

Ransomware Group:

Discovery Date: 2023-07-26 20:32

Sector:

Victim: | Group:

PWCCLINETSANDDOCUMENTS.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:19

Sector:

403 Forbidden

Victim: | Group:

DMA.US

Ransomware Group:

Discovery Date: 2023-07-19 01:18

Sector:

Attention Required! - Cloudflare

Victim: | Group:

VENTIVTECH.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:18

Sector:

Risk Management Software & Claims Management Software

Victim: | Group:

BLUEFIN.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:17

Sector:

Bluefin: Payment & Sensitive Data Security Solutions

Victim: | Group:

ESTEELAUDER.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:17

Sector:

Estée Lauder | Beauty Products, Skin Care & Makeup

Victim: | Group:

OFCOM.ORG.UK

Ransomware Group:

Discovery Date: 2023-07-19 01:16

Sector:

Home - Ofcom

Victim: | Group:

ALLEGIANTAIR.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:16

Sector:

Attention Required! - Cloudflare

Victim: | Group:

ITT.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:15

Sector:

Home - ITT Inc.

Victim: | Group:

SMC3.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:15

Sector:

LTL Transportation Pricing Data - Technology Solutions from SMC³

Victim: | Group:

COMREG.IE

Ransomware Group:

Discovery Date: 2023-07-19 01:15

Sector:

Commission for Communications Regulation

Victim: | Group:

JONASFITNESS.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:14

Sector:

Victim: | Group:

AA.COM

Ransomware Group:

Discovery Date: 2023-07-19 01:13

Sector:

Victim: | Group:

RCI.COM

Ransomware Group:

Discovery Date: 2023-07-17 13:22

Sector:

RCI – Nous animons votre réseau de voyages - RCI.com

Victim: | Group:

SIERRAWIRELESS.COM

Ransomware Group:

Discovery Date: 2023-07-17 13:21

Sector:

IoT Solutions - Modules, IoT Platforms & IoT Connectivity - Sierra Wireless

Victim: | Group:

COMPUCOM.COM

Ransomware Group:

Discovery Date: 2023-07-17 13:21

Sector:

Your Single Source for Managed IT Services Supporting Enterprises

Victim: | Group:

CFINS.COM

Ransomware Group:

Discovery Date: 2023-07-17 13:20

Sector:

Crum & Forster Insurance - Crum & Forster

Victim: | Group:

DESMI.COM

Ransomware Group:

Discovery Date: 2023-07-17 13:20

Sector:

Pump Solutions and Clean-up Systems - DESMI - Proven technology

Victim: | Group:

FMGL.COM.AU

Ransomware Group:

Discovery Date: 2023-07-17 13:20

Sector:

Home - Fortescue Metals Group Ltd

Victim: | Group:

VALMET.COM

Ransomware Group:

Discovery Date: 2023-07-17 13:19

Sector:

Valmet: technologies, services and automation to pulp, energy and paper industries

Victim: | Group:

VITESCO-TECHNOLOGIES.COM

Ransomware Group:

Discovery Date: 2023-07-17 13:19

Sector:

Vitesco Technologies - Home

Victim: | Group:

TJX.COM

Ransomware Group:

Discovery Date: 2023-07-17 13:18

Sector:

Welcome to The TJX Companies Inc.

Victim: | Group:

NOTABLEFRONTIER.COM

Ransomware Group:

Discovery Date: 2023-07-14 16:02

Sector:

Victim: | Group:

GRACE.COM

Ransomware Group:

Discovery Date: 2023-07-14 16:02

Sector:

Home

Victim: | Group:

PRGX.COM

Ransomware Group:

Discovery Date: 2023-07-14 16:02

Sector:

Home - Putting S2P Analytics at the Heart of Business Health

Victim: | Group:

HESS.COM

Ransomware Group:

Discovery Date: 2023-07-14 16:01

Sector:

Hess Corporation - A Leading Independent Energy Company

Victim: | Group:

MYCWT.COM

Ransomware Group:

Discovery Date: 2023-07-14 16:01

Sector:

Your Business Travel & Meetings Management Company - CWT

Victim: | Group:

SCHNABEL-ENG.COM

Ransomware Group:

Discovery Date: 2023-07-14 16:00

Sector:

Home - Schnabel Engineering

Victim: | Group:

ARIETISHEALTH.COM

Ransomware Group:

Discovery Date: 2023-07-14 16:00

Sector:

Arietis Health - Healthcare Revenue Cycle Management

Victim: | Group:

PINNACLETPA.COM

Ransomware Group:

Discovery Date: 2023-07-14 15:59

Sector:

Home - Pinnacle Claims Management

Victim: | Group:

REPSOLSINOPECUK.COM

Ransomware Group:

Discovery Date: 2023-07-14 15:59

Sector:

Repsol Sinopec Resources UK Limited

Victim: | Group:

JTI.COM

Ransomware Group:

Discovery Date: 2023-07-14 12:29

Sector:

JTI - Japan Tobacco International

Victim: | Group:

VOSS.NET

Ransomware Group:

Discovery Date: 2023-07-14 12:29

Sector:

Homepage: VOSS Gruppe

Victim: | Group:

UFCU.ORG

Ransomware Group:

Discovery Date: 2023-07-14 12:28

Sector:

UFCU Checking, Savings, Credit Cards, Auto Loans, Mortgages, and More

Victim: | Group:

YAKULT.COM.PH

Ransomware Group:

Discovery Date: 2023-07-14 12:28

Sector:

home - Yakult Philippines Incorporated

Victim: | Group:

ROCHESTER.EDU

Ransomware Group:

Discovery Date: 2023-07-14 12:28

Sector:

University of Rochester

Victim: | Group:

SHUTTERFLY.COM

Ransomware Group:

Discovery Date: 2023-07-13 12:44

Sector:

Shutterfly: Photo Books, Cards, Prints, Wall Art, Gifts, Wedding

Victim: | Group:

DISCOVERY.COM

Ransomware Group:

Discovery Date: 2023-07-13 12:43

Sector:

Victim: | Group:

ASPENTECH.COM

Ransomware Group:

Discovery Date: 2023-07-13 12:43

Sector:

AspenTech - Asset Optimization Software - Asset Performance Management, Process Engineering for Chemicals, Energy and Engineering & Construction

Victim: | Group:

MOTHERSON.COM

Ransomware Group:

Discovery Date: 2023-07-13 12:42

Sector:

Victim: | Group:

PAYCOM.COM

Ransomware Group:

Discovery Date: 2023-07-13 12:42

Sector:

Online Payroll Services - HR Payroll Software - Paycom

Victim: | Group:

GRIPA.ORG

Ransomware Group:

Discovery Date: 2023-07-12 21:28

Sector:

Greater Rochester Independent Practice Association – GRIPA

Victim: | Group:

SLB.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:28

Sector:

SLB, a global technology company - SLB

Victim: | Group:

AMCTHEATRES.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:28

Sector:

AMC Theatres - movie times, movie trailers, buy tickets and gift cards.

Victim: | Group:

AINT.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:27

Sector:

Advanced Integration Technology

Victim: | Group:

JACKENTERTAINMENT.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:27

Sector:

JACK Entertainment - Gaming, Hospitality & Entertainment

Victim: | Group:

NASCO.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:26

Sector:

NASCO – NASCO is a healthcare company dedicated to co-creating digital health solutions for Blue Cross and Blue Shield companies.

Victim: | Group:

TGIDIRECT.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:26

Sector:

Victim: | Group:

HONEYWELL.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:25

Sector:

Honeywell - The Future Is What We Make It

Victim: | Group:

CLEARESULT.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:25

Sector:

CLEAResult - Energy efficiency, transition and decarbonization solutions

Victim: | Group:

RADIUSGS.COM

Ransomware Group:

Discovery Date: 2023-07-12 21:24

Sector:

Omnichannel Customer Experience Outsourcing - Radius

Victim: | Group:

CONSOLENERGY.COM

Ransomware Group:

Discovery Date: 2023-07-11 18:02

Sector:

Home - CONSOL Energy Inc.

Victim: | Group:

KALEAERO.COM

Ransomware Group:

Discovery Date: 2023-07-11 18:02

Sector:

Victim: | Group:

AGILYSYS.COM

Ransomware Group:

Discovery Date: 2023-07-11 18:01

Sector:

Victim: | Group:

SCCU.COM

Ransomware Group:

Discovery Date: 2023-07-11 18:01

Sector:

Victim: | Group:

ARVATO.COM

Ransomware Group:

Discovery Date: 2023-07-11 18:01

Sector:

Arvato - E-Commerce & Logistik

Victim: | Group:

RITEAID.COM

Ransomware Group:

Discovery Date: 2023-07-11 18:00

Sector:

Online Pharmacy and Store - Rite Aid

Victim: | Group:

PIONEERELECTRONICS.COM

Ransomware Group:

Discovery Date: 2023-07-11 18:00

Sector:

Pioneer USA, Car Stereo, Speakers, Home Theater, Navigation, DJ - Pioneer Electronics USA

Victim: | Group:

BAM.COM.GT

Ransomware Group:

Discovery Date: 2023-07-11 17:59

Sector:

Banco Agromercantil de Guatemala, S.A. - BAM

Victim: | Group:

TOMTOM.COM

Ransomware Group:

Discovery Date: 2023-07-11 17:58

Sector:

TomTom — Mapping and Location Technology

Victim: | Group:

EMERSON.COM

Ransomware Group:

Discovery Date: 2023-07-11 17:58

Sector:

Emerson Global - Emerson

Victim: | Group:

RICOHACUMEN.COM

Ransomware Group:

Discovery Date: 2023-07-10 19:49

Sector:

Victim: | Group:

SMA.DE

Ransomware Group:

Discovery Date: 2023-07-10 19:48

Sector:

Willkommen bei SMA! - SMA Solar

Victim: | Group:

VRM.DE

Ransomware Group:

Discovery Date: 2023-07-10 19:48

Sector:

VRM Medienunternehmen - Über uns

Victim: | Group:

UMASSMED.EDU

Ransomware Group:

Discovery Date: 2023-07-10 19:48

Sector:

UMass Chan Medical School

Victim: | Group:

VISIONWARE.CA

Ransomware Group:

Discovery Date: 2023-07-10 19:47

Sector:

Victim: | Group:

JHU.EDU

Ransomware Group:

Discovery Date: 2023-07-10 19:47

Sector:

Home - Johns Hopkins University

Victim: | Group:

FMFCU.ORG

Ransomware Group:

Discovery Date: 2023-07-10 19:46

Sector:

Franklin Mint Federal Credit Union

Victim: | Group:

JPRMP.COM

Ransomware Group:

Discovery Date: 2023-07-10 19:46

Sector:

JP RMP - Medical Billing and Bad Debt Collection Services

Victim: | Group:

WESTAT.COM

Ransomware Group:

Discovery Date: 2023-07-10 19:45

Sector:

Homepage - Westat

Victim: | Group:

RADISSONHOTELSAMERICAS.COM

Ransomware Group:

Discovery Date: 2023-07-10 19:45

Sector:

Victim: | Group:

CROWE.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:25

Sector:

Accounting, Consulting & Technology - Crowe LLP

Victim: | Group:

AUTOZONE.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:25

Sector:

Victim: | Group:

BCDTRAVEL.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:24

Sector:

Corporate Travel Management for Business by BCD Travel

Victim: | Group:

AMERICANNATIONAL.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:24

Sector:

American National Insurance

Victim: | Group:

USG.EDU

Ransomware Group:

Discovery Date: 2023-07-07 16:24

Sector:

University System of Georgia

Victim: | Group:

CYTOMX.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:23

Sector:

Home - CytomX

Victim: | Group:

MARYKAY.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:23

Sector:

Mary Kay - Official Site

Victim: | Group:

FISCDP.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:22

Sector:

Victim: | Group:

KERNAGENCY.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:22

Sector:

KERN - an Omnicom Agency

Victim: | Group:

UOFLHEALTH.ORG

Ransomware Group:

Discovery Date: 2023-07-07 16:21

Sector:

UofL Health - Louisville Hospital and Health Care System Serving Kentucky and Indiana

Victim: | Group:

L8SOLUTIONS.CO.UK

Ransomware Group:

Discovery Date: 2023-07-07 16:21

Sector:

LEVEL 8 - Level 8 Solutions

Victim: | Group:

TDAMERITRADE.COM

Ransomware Group:

Discovery Date: 2023-07-07 16:21

Sector:

Online Stock Trading, Investing, Brokerage - TD Ameritrade

Victim: | Group:

DELARUE.COM

Ransomware Group:

Discovery Date: 2023-07-06 23:25

Sector:

De La Rue - Currency and Authentication Solutions

Victim: | Group:

ENERGYTRANSFER.COM

Ransomware Group:

Discovery Date: 2023-07-06 23:24

Sector:

Energy Transfer

Victim: | Group:

PAYCOR.COM

Ransomware Group:

Discovery Date: 2023-07-06 23:23

Sector:

HCM Solutions for Leaders and HR Teams

Victim: | Group:

NETSCOUT.COM

Ransomware Group:

Discovery Date: 2023-07-06 23:23

Sector:

Network, Security & Application Performance Monitoring Platform - NETSCOUT

Victim: | Group:

WOLTERSKLUWER.COM

Ransomware Group:

Discovery Date: 2023-07-06 23:22

Sector:

Wolters Kluwer - Combining Domain Expertise With Advanced Technology - Wolters Kluwer

Victim: | Group:

CADENCEBANK.COM

Ransomware Group:

Discovery Date: 2023-07-06 23:22

Sector:

Cadence Bank - Home

Victim: | Group:

BANKWITHUNITED.COM

Ransomware Group:

Discovery Date: 2023-07-06 23:21

Sector:

United Bank - Personal Banking, Business Banking, Investments

Victim: | Group:

NEWERATECH.COM

Ransomware Group:

Discovery Date: 2023-07-06 23:21

Sector:

Page not found - New Era Technology

Victim: | Group:

TRANSPERFECT.COM

Ransomware Group:

Discovery Date: 2023-07-05 23:11

Sector:

Language & Technology Solutions for Business - TransPerfect

Victim: | Group:

QUORUMFCU.ORG

Ransomware Group:

Discovery Date: 2023-07-05 23:10

Sector:

High-yield Savings, Mortgage Experts, Mobile Banking

Victim: | Group:

MERATIVE.COM

Ransomware Group:

Discovery Date: 2023-07-05 23:10

Sector:

Healthcare Data, Technology and Analytics - Merative

Victim: | Group:

NORGREN.COM

Ransomware Group:

Discovery Date: 2023-07-05 23:09

Sector:

Victim: | Group:

CIENA.COM

Ransomware Group:

Discovery Date: 2023-07-05 23:09

Sector:

Ciena - A networking systems, services, and software company - Ciena

Victim: | Group:

KYBURZDRUCK.CH

Ransomware Group:

Discovery Date: 2023-07-05 23:09

Sector:

Druckerei Kyburz AG: Startseite

Victim: | Group:

UNITEDREGIONAL.ORG

Ransomware Group:

Discovery Date: 2023-07-05 23:08

Sector:

Home - United Regional Health Care System

Victim: | Group:

TDECU.ORG

Ransomware Group:

Discovery Date: 2023-07-05 23:08

Sector:

TDECU - Your Texas Credit Union With Digital Banking

Victim: | Group:

BRADYID.COM

Ransomware Group:

Discovery Date: 2023-07-05 23:07

Sector:

BradyID.com - Shop Industrial Printers, Labels, Lockout & More

Victim: | Group:

BARRICK.COM

Ransomware Group:

Discovery Date: 2023-07-05 23:07

Sector:

Barrick Gold Corporation - Home

Victim: | Group:

DURR.COM

Ransomware Group:

Discovery Date: 2023-07-05 23:06

Sector:

Dürr – Leading in Production Efficiency - EN - Dürr

Victim: | Group:

ENCORECAPITAL.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:06

Sector:

Encore Capital Group

Victim: | Group:

TRELLISWARE.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:06

Sector:

TrellisWare Technologies, Inc.

Victim: | Group:

CLICKSGROUP.CO.ZA

Ransomware Group:

Discovery Date: 2023-06-30 13:05

Sector:

Home - Clicks Group

Victim: | Group:

HORNBECKOFFSHORE.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:05

Sector:

Hornbeck Offshore Services

Victim: | Group:

FISGLOBAL.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:04

Sector:

Victim: | Group:

DIGITALINSIGHT.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:03

Sector:

Digital banking for any financial institution - software + services

Victim: | Group:

IRONBOW.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:03

Sector:

Iron Bow Technologies: An Award Winning IT Solutions Company

Victim: | Group:

VERICAST.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:02

Sector:

Home - Vericast

Victim: | Group:

RHENUS.GROUP

Ransomware Group:

Discovery Date: 2023-06-30 13:02

Sector:

Rhenus Logistics - Your Logistics Provider

Victim: | Group:

SOVOS.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:01

Sector:

Tax Compliance & Regulatory Reporting Software - Sovos

Victim: | Group:

HARRINGTONCOMPANY.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:00

Sector:

The Harrington Company Home Page

Victim: | Group:

CITYNATIONAL.COM

Ransomware Group:

Discovery Date: 2023-06-30 13:00

Sector:

City National Bank of Florida

Victim: | Group:

KLGATES.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:45

Sector:

Homepage - K&L Gates

Victim: | Group:

KIRKLAND & ELLIS LLP

Ransomware Group:

Discovery Date: 2023-06-29 11:44

Sector:

Group:

DARLINGCONSULTING.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:44

Sector:

Victim: | Group:

CPIAI.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:43

Sector:

CPIAI -Huntsville TX - Insurance - CP Insurance - United States

Victim: | Group:

DELTADENTAL.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:43

Sector:

Affordable Dental Insurance Plans - Delta Dental

Victim: | Group:

COGNIZANT.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:42

Sector:

Intuition engineered—human insight, superhuman speed - Cognizant UK & Ireland

Victim: | Group:

ENSTARGROUP.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:42

Sector:

Enstar Group

Victim: | Group:

SAPIENS.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:41

Sector:

Insurance Software Solutions - Sapiens

Victim: | Group:

CARESOURCE.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:40

Sector:

CareSource - Health Care with Heart

Victim: | Group:

JACKSON.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:40

Sector:

Victim: | Group:

STARMOUNTLIFE.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:39

Sector:

Starmount Life Insurance Company

Victim: | Group:

KOTAKLIFE.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:39

Sector:

Life Insurance - Kotak Life Insurance Plans & Policies in India

Victim: | Group:

KIRKLAND.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:38

Sector:

Home - Kirkland & Ellis LLP

Victim: | Group:

PROSKAUER.COM

Ransomware Group:

Discovery Date: 2023-06-29 11:38

Sector:

It’s our business to understand yours - Proskauer Rose LLP

Victim: | Group:

ABBVIE.COM

Ransomware Group:

Discovery Date: 2023-06-26 22:24

Sector:

Pharmaceutical Research & Development - AbbVie

Victim: | Group:

UCLA.EDU

Ransomware Group:

Discovery Date: 2023-06-26 22:24

Sector:

UCLA

Victim: | Group:

SIEMENS-ENERGY.COM

Ransomware Group:

Discovery Date: 2023-06-26 22:23

Sector:

Home - Global - Siemens Energy Global

Victim: | Group:

SE.COM

Ransomware Group:

Discovery Date: 2023-06-26 22:23

Sector:

Schneider Electric Global - Global Specialist in Energy Management and Automation

Victim: | Group:

WERUM.COM

Ransomware Group:

Discovery Date: 2023-06-26 22:22

Sector:

Victim: | Group:

MSAMLIN.COM

Ransomware Group:

Discovery Date: 2023-06-23 22:13

Sector:

MS Amlin - Global Specialty Insurer and Reinsurer

Victim: | Group:

GUSCANADA.CA

Ransomware Group:

Discovery Date: 2023-06-23 11:39

Sector:

Victim: | Group:

PWC.COM

Ransomware Group:

Discovery Date: 2023-06-23 11:39

Sector:

PwC: Building trust for today and tomorrow

Victim: | Group:

EY.COM

Ransomware Group:

Discovery Date: 2023-06-23 11:38

Sector:

EY US - Home - Building a better working world

Victim: | Group:

SONY.COM

Ransomware Group:

Discovery Date: 2023-06-23 11:38

Sector:

Sony Group Portal - Home

Victim: | Group:

ANDESASERVICES.COM

Ransomware Group:

Discovery Date: 2023-06-23 11:37

Sector:

Policy Lifecycle Solutions Provider for Life Insurance & Annuities Industry - Andesa

Victim: | Group:

ZURICH.COM.BR

Ransomware Group:

Discovery Date: 2023-06-20 04:43

Sector:

Victim: | Group:

CBESERVICES.COM

Ransomware Group:

Discovery Date: 2023-06-20 04:42

Sector:

CBE Services - Home Builders in Lake Macquarie

Victim: | Group:

EMSSHI.COM

Ransomware Group:

Discovery Date: 2023-06-20 04:42

Sector:

Victim: | Group:

BAESMAN.COM

Ransomware Group:

Discovery Date: 2023-06-20 04:41

Sector:

CRM, Customer Loyalty, Marketing, Print & Fulfillment - Baesman

Victim: | Group:

STOCKMANBANK.COM

Ransomware Group:

Discovery Date: 2023-06-20 04:41

Sector:

Banking, Wealth Management and Insurance - Stockman Bank

Victim: | Group:

NORTONLIFELOCK.COM

Ransomware Group:

Discovery Date: 2023-06-20 04:40

Sector:

Un leader mondial de la cybersécurité grand public - NortonLifeLock

Victim: | Group:

CREELIGHTING.COM

Ransomware Group:

Discovery Date: 2023-06-19 15:42

Sector:

Home - Cree Lighting

Victim: | Group:

SKILLSOFT.COM

Ransomware Group:

Discovery Date: 2023-06-19 15:41

Sector:

Skillsoft - Online Courses and Training - Free Access

Victim: | Group:

SCU.EDU

Ransomware Group:

Discovery Date: 2023-06-19 15:41

Sector:

Home - Santa Clara University

Victim: | Group:

TELOS.COM

Ransomware Group:

Discovery Date: 2023-06-19 15:40

Sector:

Telos Corporation - Solutions that Empower and Protect the Enterprise

Victim: | Group:

GESA.COM

Ransomware Group:

Discovery Date: 2023-06-19 15:39

Sector:

Washington Credit Union - Loans - Savings Accounts - Gesa

Victim: | Group:

PALIG.COM (PANAMERICAN)

Ransomware Group:

Discovery Date: 2023-06-16 23:04

Sector:

Victim: | Group:

NUANCE.COM

Ransomware Group:

Discovery Date: 2023-06-16 23:03

Sector:

Nuance - Conversational AI for Healthcare and Customer Engagement - Nuance

Victim: | Group:

AON.COM

Ransomware Group:

Discovery Date: 2023-06-16 23:03

Sector:

Better Decisions - Commercial Risk - Health - Reinsurance - Wealth - Aon

Victim: | Group:

CEGEDIM.COM

Ransomware Group:

Discovery Date: 2023-06-16 14:38

Sector:

A global technology and services company committed to innovation- Cegedim

Victim: | Group:

STIWA.COM

Ransomware Group:

Discovery Date: 2023-06-16 14:37

Sector:

Automationstechnik & Automationslösungen vom Hersteller - STIWA - STIWA

Victim: | Group:

CNCBINTERNATIONAL.COM

Ransomware Group:

Discovery Date: 2023-06-16 14:37

Sector:

Victim: | Group:

BOSTONGLOBE.COM

Ransomware Group:

Discovery Date: 2023-06-16 14:37

Sector:

The Boston Globe

Victim: | Group:

ARBURG.COM

Ransomware Group:

Discovery Date: 2023-06-16 14:36

Sector:

Home - ARBURG

Victim: | Group:

ICSYSTEM.COM

Ransomware Group:

Discovery Date: 2023-06-16 14:36

Sector:

Debt Collection Services & Solutions - IC System

Victim: | Group:

UMSYSTEM.EDU

Ransomware Group:

Discovery Date: 2023-06-16 14:35

Sector:

University of Missouri System

Victim: | Group:

COLUMBIABANK.COM (UMPQUABANK.COM)

Ransomware Group:

Discovery Date: 2023-06-16 14:35

Sector:

Victim: | Group:

PRAGROUP.NO

Ransomware Group:

Discovery Date: 2023-06-16 14:33

Sector:

Hjem - PRA Group Norge AS

Victim: | Group:

MARTI.COM

Ransomware Group:

Discovery Date: 2023-06-16 14:33

Sector:

Wir bauen in die Höhe, die Tiefe und auf die Zukunft – Marti Gruppe

Victim: | Group:

EASTWESTBANK.COM

Ransomware Group:

Discovery Date: 2023-06-15 21:10

Sector:

Personal and Commercial Banking, Home Loans, Wealth Strategies - East West Bank

Victim: | Group:

POWERFI.ORG

Ransomware Group:

Discovery Date: 2023-06-15 21:10

Sector:

Power Financial Credit Union - South Florida Credit Union - Loans

Victim: | Group:

BARHARBOR.BANK

Ransomware Group:

Discovery Date: 2023-06-15 21:09

Sector:

Personal Homepage › Bar Harbor Bank & Trust

Victim: | Group:

APLUSFCU.ORG

Ransomware Group:

Discovery Date: 2023-06-15 21:09

Sector:

A+ Federal Credit Union - Award-Winning Texas Credit Union

Victim: | Group:

BRAULT.US

Ransomware Group:

Discovery Date: 2023-06-15 21:08

Sector:

Brault - End-to-End RCM & Practice Management

Victim: | Group:

GENERICON.AT

Ransomware Group:

Discovery Date: 2023-06-15 16:37

Sector:

Startseite - Genericon Pharma

Victim: | Group:

CARESERVICESLLC.COM

Ransomware Group:

Discovery Date: 2023-06-15 16:37

Sector:

Care Services, LLC – Nationwide Coverage. Local Delivery.

Victim: | Group:

ENZO.COM

Ransomware Group:

Discovery Date: 2023-06-15 16:36

Sector:

Home - Enzo Biochem

Victim: | Group:

316FIDUCIARIES.COM

Ransomware Group:

Discovery Date: 2023-06-15 16:36

Sector:

Your Expert Plan Administration Fiduciary

Victim: | Group:

DELAWARELIFE.COM

Ransomware Group:

Discovery Date: 2023-06-15 16:35

Sector:

Delaware Life - Delaware Life - Home

Victim: | Group:

NAVAXX.LU

Ransomware Group:

Discovery Date: 2023-06-15 16:35

Sector:

Startseite - navAXX S.A.

Victim: | Group:

CUANSWERS.COM

Ransomware Group:

Discovery Date: 2023-06-15 16:35

Sector:

Home - CU*Answers

Victim: | Group:

SYNLAB.FR

Ransomware Group:

Discovery Date: 2023-06-15 16:34

Sector:

Le groupe SYNLAB propose une gamme complète de diagnostics médicaux innovants et fiables pour les patients, les médecins en exercice, les cliniques et l'industrie pharmaceutique.

Victim: | Group:

HEALTHEQUITY.COM

Ransomware Group:

Discovery Date: 2023-06-15 16:34

Sector:

HealthEquity - Industry's #1 HSA Administrator

Victim: | Group:

uga.edu

Ransomware Group:

Discovery Date: 2023-06-14 20:22

Sector:

UGA

Victim: | Group:

leggett.com

Ransomware Group:

Discovery Date: 2023-06-14 20:21

Sector:

Leggett & Platt®

Victim: | Group:

bankers-bank.com

Ransomware Group:

Discovery Date: 2023-06-14 20:21

Sector:

Sucuri WebSite Firewall - Access Denied

Victim: | Group:

heidelberg.com

Ransomware Group:

Discovery Date: 2023-06-14 20:20

Sector:

Print and Packaging Solutions - HEIDELBERG

Victim: | Group:

landal.com

Ransomware Group:

Discovery Date: 2023-06-14 20:20

Sector:

Landal GreenParks - Over 95 parks in The Netherlands, Belgium, Germany, Austria, Switzerland, Czech Republic, Hungary, Denmark and England

Victim: | Group:

uhcsr.com

Ransomware Group:

Discovery Date: 2023-06-14 20:20

Sector:

Victim: | Group:

oekk.ch

Ransomware Group:

Discovery Date: 2023-06-14 20:19

Sector:

ÖKK – Die Krankenkasse mit gesunden Bündnerverstand

Victim: | Group:

studentclearinghouse.org

Ransomware Group:

Discovery Date: 2023-06-14 20:19

Sector:

National Student Clearinghouse

Victim: | Group:

putnam.com

Ransomware Group:

Discovery Date: 2023-06-14 20:18

Sector:

Putnam Investments – ETFs, Mutual Funds, Institutional, and 529

Victim: | Group:

datasite.com

Ransomware Group:

Discovery Date: 2023-06-14 20:18

Sector:

Premier Virtual Data Rooms for M&A Dealmaking - Datasite

Victim: | Group:

1stsource.com

Ransomware Group:

Discovery Date: 2023-06-14 20:17

Sector:

Your 1st Source for Personal and Business Banking - 1st Source

Victim: | Group:

shell.com

Ransomware Group:

Discovery Date: 2023-06-14 20:17

Sector:

Shell Global

Victim: | Group:

MICHENER.CA

Ransomware Group:

Discovery Date: 2023-06-10 21:55

Sector:

Home - The Michener Institute of Education at UHN

Victim: | Group:

HCI.EDU

Ransomware Group:

Discovery Date: 2023-06-10 21:55

Sector:

HCI College - Transform Your Story

Victim: | Group:

360EQUIPMENTFINANCE.COM

Ransomware Group:

Discovery Date: 2023-06-10 21:54

Sector:

360 Equipment Finance in Austin, Texas

Victim: | Group:

PRECISIONMEDICALBILLING.NET

Ransomware Group:

Discovery Date: 2023-06-10 21:54

Sector:

Victim: | Group:

IDTECHPRODUCTS.COM

Ransomware Group:

Discovery Date: 2023-05-04 00:50

Sector:

Homepage - ID TECH Products

Victim: | Group:

MYSIMPLYGREEN.COM

Ransomware Group:

Discovery Date: 2023-05-02 22:50

Sector:

403 Forbidden

Victim: | Group:

GC-EMPLOYMENT.COM

Ransomware Group:

Discovery Date: 2023-04-28 08:36

Sector:

GC Employment Staffing Agency - Full Time Jobs - Temp Jobs - Staffing, Recruitment and Employment Agency

Victim: | Group:

AUT-TECH-GROUP.COM

Ransomware Group:

Discovery Date: 2023-04-21 18:51

Sector:

AUT-TECH Group - Full Service Company

Victim: | Group:

LASOTEL.FR

Ransomware Group:

Discovery Date: 2023-04-02 23:02

Sector:

Accueil - LASOTEL

Victim: | Group:

MULTIPLAN.COM

Ransomware Group:

Discovery Date: 2023-03-30 19:12

Sector:

Victim: | Group:

BISSELL.COM

Ransomware Group:

Discovery Date: 2023-03-24 21:36

Sector:

Victim: | Group:

EMERALDX.COM

Ransomware Group:

Discovery Date: 2023-03-24 21:36

Sector:

Home Page - Emerald

Victim: | Group:

CAJASANRAFAEL.COM.MX

Ransomware Group:

Discovery Date: 2023-03-24 21:35

Sector:

Caja San Rafael

Victim: | Group:

TAS.GOV.AU

Ransomware Group:

Discovery Date: 2023-03-24 21:35

Sector:

Home - Tasmanian Government Online

Victim: | Group:

ENERJISAURETIM.COM

Ransomware Group:

Discovery Date: 2023-03-24 21:35

Sector:

Victim: | Group:

INTELLICARE.COM.PH

Ransomware Group:

Discovery Date: 2023-03-24 21:34

Sector:

Victim: | Group:

CRESCENTHOTELS.COM

Ransomware Group:

Discovery Date: 2023-03-24 21:34

Sector:

Crescent Hotels & Resorts - Top Hotel Management Company

Victim: | Group:

COLMAC.COM

Ransomware Group:

Discovery Date: 2023-03-24 21:33

Sector:

Columbia Machine, Inc. - Engineered Solutions

Victim: | Group:

INVESTORCOM.COM

Ransomware Group:

Discovery Date: 2023-03-24 21:33

Sector:

Regulatory Compliance Software & Communications Solutions - InvestorCOM

Victim: | Group:

IMAGINE360.COM

Ransomware Group:

Discovery Date: 2023-03-24 15:07

Sector:

403 Forbidden

Victim: | Group:

THECYPRINUS.COM

Ransomware Group:

Discovery Date: 2023-03-24 13:23

Sector:

Victim: | Group:

SPI.CO.ZA

Ransomware Group:

Discovery Date: 2023-03-24 13:22

Sector:

SPI Group

Victim: | Group:

DETECH.COM.TR

Ransomware Group:

Discovery Date: 2023-03-24 13:22

Sector:

Not Acceptable!

Victim: | Group:

GRUPOFLORAPLANT.COM

Ransomware Group:

Discovery Date: 2023-03-24 13:21

Sector:

Grupo Floraplant

Victim: | Group:

ALTO.US

Ransomware Group:

Discovery Date: 2023-03-24 13:21

Sector:

ALTO - Retail Crime Safety and Asset Protection - ALTO

Victim: | Group:

GOA.GOV.IN

Ransomware Group:

Discovery Date: 2023-03-24 11:11

Sector:

Victim: | Group:

INTERTERMINALS.COM

Ransomware Group:

Discovery Date: 2023-03-24 11:11

Sector:

Victim: | Group:

GLOBALFARM.COM.AR

Ransomware Group:

Discovery Date: 2023-03-24 11:10

Sector:

Victim: | Group:

ATOS.NET

Ransomware Group:

Discovery Date: 2023-03-24 11:10

Sector:

Atos – Home

Victim: | Group:

TGW.COM

Ransomware Group:

Discovery Date: 2023-03-24 11:09

Sector:

tgw.com is currently not available in your country

Victim: | Group:

DERK.CL

Ransomware Group:

Discovery Date: 2023-03-24 11:09

Sector:

DERK INGENIERÍA, GEOLOGÍA Y SERVICIOS - Inicio

Victim: | Group:

REDBOXVOICE.COM

Ransomware Group:

Discovery Date: 2023-03-24 11:08

Sector:

Red Box is now part of Uniphore

Victim: | Group:

PROGRESSION.COM

Ransomware Group:

Discovery Date: 2023-03-24 11:08

Sector:

Redefine Your IT Infrastructure - With Progression - Progression

Victim: | Group:

UNIMELB.EDU.AU

Ransomware Group:

Discovery Date: 2023-03-24 11:07

Sector:

The University of Melbourne, Australia - Australia's best university and one of the world's finest

Victim: | Group:

CROWNRESORT.COM.AU

Ransomware Group:

Discovery Date: 2023-03-24 11:07

Sector:

Victim: | Group:

BRIDGEWAY.COM.PH

Ransomware Group:

Discovery Date: 2023-03-24 11:06

Sector:

Bridgeway Communication System Inc – Bridging ways to innovation

Victim: | Group:

TLG.COM

Ransomware Group:

Discovery Date: 2023-03-24 11:05

Sector:

403 Forbidden

Victim: | Group:

PHOENIX.TECH

Ransomware Group:

Discovery Date: 2023-03-23 13:35

Sector:

Sucuri WebSite Firewall - Access Denied

Victim: | Group:

SODALESSOLUTIONS.COM

Ransomware Group:

Discovery Date: 2023-03-23 13:31

Sector:

Health, Safety, and Employee Relations Software - Sodales

Victim: | Group:

NATIONSBENEFITS.COM

Ransomware Group:

Discovery Date: 2023-03-23 13:30

Sector:

Innovative Healthcare Management Solutions - NationsBenefits

Victim: | Group:

SHOLASTIC.COM

Ransomware Group:

Discovery Date: 2023-03-23 13:26

Sector:

404 Not Found

Victim: | Group:

VUMACAM.CO.ZA

Ransomware Group:

Discovery Date: 2023-03-23 13:24

Sector:

Trust in our vision - VumaCam

Victim: | Group:

TORONTO.CA

Ransomware Group:

Discovery Date: 2023-03-23 13:23

Sector:

City of Toronto

Victim: | Group:

CLOUDMED.COM

Ransomware Group:

Discovery Date: 2023-03-23 13:19

Sector:

403 Forbidden

Victim: | Group:

DPWORLD.COM

Ransomware Group:

Discovery Date: 2023-03-23 13:18

Sector:

403 Forbidden

Victim: | Group:

SOLPAC.CO.JP

Ransomware Group:

Discovery Date: 2023-03-23 13:17

Sector:

株式会社ソルパック

Victim: | Group:

VIRGIN.COM

Ransomware Group:

Discovery Date: 2023-03-23 13:16

Sector:

Official site - Virgin

Victim: | Group:

LEGACY-TECHNOLOGIES.DE

Ransomware Group:

Discovery Date: 2023-03-23 13:16

Sector:

Ihr Partner für IT-Sicherheit » Legacy Technologies GmbH

Victim: | Group:

OSHCO.COM

Ransomware Group:

Discovery Date: 2023-03-23 13:15

Sector:

Homepage - OSHCO Olayan

Victim: | Group:

GRAY.TV

Ransomware Group:

Discovery Date: 2023-03-23 13:15

Sector:

Error 404: Page not found. - Gray Television

Victim: | Group:

ORCAAUDIT.COM

Ransomware Group:

Discovery Date: 2023-03-23 13:14

Sector:

Freight Audit Company - Invoice Audit Service - Orca Intelligence Inc

Victim: | Group:

CHEMILAB.COM.CO

Ransomware Group:

Discovery Date: 2023-03-23 13:14

Sector:

Laboratorio Chemilab

Victim: | Group:

PAYBOXAPP.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:39

Sector:

Just a moment...

Victim: | Group:

VERRAMOBILITY.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:38

Sector:

Verra Mobility

Victim: | Group:

BUNZL.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:38

Sector:

Homepage - Bunzl

Victim: | Group:

FIRST-CENTRAL.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:38

Sector:

Victim: | Group:

ALIVIAHELTH.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:37

Sector:

Victim: | Group:

HORMELFOODS.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:37

Sector:

Hormel Foods

Victim: | Group:

THECROSBYGROUP.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:36

Sector:

403 Forbidden

Victim: | Group:

MUNICHRE.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:36

Sector:

Home - Munich Re

Victim: | Group:

GRUPOVANTI.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:35

Sector:

Inicio - Grupo Vanti

Victim: | Group:

VOLARIS.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:35

Sector:

Victim: | Group:

ACCUZIP.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:35

Sector:

AccuZIP Bulk Postal Software and Data Cleansing For Direct Mail Marketing

Victim: | Group:

SEPIRE.COM

Ransomware Group:

Discovery Date: 2023-03-23 12:34

Sector:

Sepire - Communication Experts

Victim: | Group:

WVI.ORG

Ransomware Group:

Discovery Date: 2023-03-23 12:34

Sector:

About World Vision - HomePage - World Vision International

Victim: | Group:

TTBH.ORG

Ransomware Group:

Discovery Date: 2023-03-23 12:33

Sector:

Tropical Texas Behavioral Health

Victim: | Group:

HUMANGOOD.COM

Ransomware Group:

Discovery Date: 2023-03-23 11:13

Sector:

Victim: | Group:

KANNACT.COM

Ransomware Group:

Discovery Date: 2023-03-23 11:12

Sector:

Kannact

Victim: | Group:

CINEPLEX.COM

Ransomware Group:

Discovery Date: 2023-03-23 11:12

Sector:

Victim: | Group:

AMERIJET.COM

Ransomware Group:

Discovery Date: 2023-03-23 11:11

Sector:

Shipping Company - Air Freight - Cargo Shipping - Amerijet

Victim: | Group:

GDI.COM

Ransomware Group:

Discovery Date: 2023-03-23 11:11

Sector:

403 Forbidden

Victim: | Group:

ZOSKINHEALTH.COM

Ransomware Group:

Discovery Date: 2023-03-23 11:10

Sector:

ZO® Skin Health

Victim: | Group:

HRTRANSIT.ORG

Ransomware Group:

Discovery Date: 2023-03-23 11:10

Sector:

Victim: | Group:

PLURALSIGHT.COM

Ransomware Group:

Discovery Date: 2023-03-23 11:10

Sector:

Online Courses, Learning Paths, and Certifications - Pluralsight

Victim: | Group:

PPF.CO.UK

Ransomware Group:

Discovery Date: 2023-03-23 11:09

Sector:

Welcome to the PPF - Pension Protection Fund

Victim: | Group:

LASOLTEL.FR

Ransomware Group:

Discovery Date: 2023-03-22 23:03

Sector:

Victim: | Group:

PG.COM

Ransomware Group:

Discovery Date: 2023-03-22 23:02

Sector:

403 Forbidden

Victim: | Group:

CROSSVILLEINC.COM

Ransomware Group:

Discovery Date: 2023-03-22 23:02

Sector:

Crossville Inc Tile - Home New

Victim: | Group:

LESLIESPOOL.COM

Ransomware Group:

Discovery Date: 2023-03-22 19:08

Sector:

Pool Supplies, Service & Repair - Leslie's Pool Supplies

Victim: | Group:

SAKSFIFTHAVENUE.COM

Ransomware Group:

Discovery Date: 2023-03-20 17:14

Sector:

Access Denied

Victim: | Group:

JAYMART.CO.TH

Ransomware Group:

Discovery Date: 2023-03-16 23:33

Sector:

Jaymart Group Holdings

Victim: | Group:

SERVICESTREAM.COM.AU

Ransomware Group:

Discovery Date: 2023-03-16 23:33

Sector:

Home - Service Stream

Victim: | Group:

WORLDMARKET.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:32

Sector:

Victim: | Group:

WILDFIRE-DEFENSE.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:32

Sector:

Wildfire Defense Systems, Inc.

Victim: | Group:

SWEEPINGCORP.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:31

Sector:

403 Forbidden

Victim: | Group:

TUEBORA.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:31

Sector:

Not Acceptable!

Victim: | Group:

RATELINX.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:30

Sector:

403 Forbidden

Victim: | Group:

FERGUSON.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:30

Sector:

Plumbing Supplies, HVAC Parts, Pipe, Valves & Fittings – Ferguson

Victim: | Group:

ACENURSING.ORG

Ransomware Group:

Discovery Date: 2023-03-16 23:29

Sector:

Accreditation Commission for Education in Nursing – The leading authority for nursing education accreditation

Victim: | Group:

WELLBE.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:29

Sector:

403 Forbidden

Victim: | Group:

HELLOBRIGHTLINE.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:28

Sector:

Virtual Mental Health Care for Kids and Teens - Brightline

Victim: | Group:

HITACHIENERGY.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:28

Sector:

Victim: | Group:

SAE.ORG

Ransomware Group:

Discovery Date: 2023-03-16 23:27

Sector:

The Mission of SAE International is to advance mobility knowledge and solutions

Victim: | Group:

AVIDXCHANGE.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:27

Sector:

403 Forbidden

Victim: | Group:

GALDERMA.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:26

Sector:

Home - Galderma

Victim: | Group:

NEWEUROPEANOFFSHORE.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:25

Sector:

Victim: | Group:

MEDEXHCO.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:25

Sector:

Medex The Total Solution to Rising Workers' Compensation Costs

Victim: | Group:

INVESTQUEBEC.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:24

Sector:

Prêts, capital-actions et crédits d’impôt pour PME et grandes entreprises québécoises

Victim: | Group:

RIOTINTO.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:24

Sector:

Victim: | Group:

ITXCOMPANIES.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:23

Sector:

Home - ITx Companies

Victim: | Group:

HOMEWOODHEALTH.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:23

Sector:

Homewood Health

Victim: | Group:

GUINNESSPARTNERSHIP.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:22

Sector:

The Guinness Partnership

Victim: | Group:

ALLIEDBENEFIT.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:22

Sector:

Victim: | Group:

USWELLNESS.COM

Ransomware Group:

Discovery Date: 2023-03-16 23:21

Sector:

Employee Health & Wellness Portals - Biometric Screening - US Wellness

Victim: | Group:

RUBRIK.COM

Ransomware Group:

Discovery Date: 2023-03-14 11:14

Sector:

Zero Trust Data Security - Rubrik

Victim: | Group:

ONEX.COM

Ransomware Group:

Discovery Date: 2023-03-14 11:14

Sector:

Home - Onex

Victim: | Group:

PEOPLECORPORATION.COM

Ransomware Group:

Discovery Date: 2023-03-10 11:11

Sector:

People Corporation – Experience the Benefits of People

Victim: | Group:

MEDMINDER.COM

Ransomware Group:

Discovery Date: 2023-03-10 11:10

Sector:

Home - MedMinder

Victim: | Group:

AXISBANK.COM

Ransomware Group:

Discovery Date: 2023-03-10 11:10

Sector:

Personal Banking - Internet Banking - Corporate, NRI Banking Services Online - Axis Bank

Victim: | Group:

HOUSELOAN.COM

Ransomware Group:

Discovery Date: 2023-03-10 11:09

Sector:

Cornerstone Home Lending

Victim: | Group:

ALIVIAHEALTH.COM

Ransomware Group:

Discovery Date: 2023-03-10 11:09

Sector:

Home - Puerto Rico - Alivia Health

Victim: | Group:

GROUPAMANA.COM

Ransomware Group:

Discovery Date: 2023-03-07 23:36

Sector:

Homepage - AMANA.

Victim: | Group:

HATCHBANK.COM

Ransomware Group:

Discovery Date: 2023-03-06 11:29

Sector:

Victim: | Group:

NYCBAR.ORG

Ransomware Group:

Discovery Date: 2023-01-13 15:17

Sector:

New York City Bar Association

Victim: | Group:

CGMLLC.NET

Ransomware Group:

Discovery Date: 2023-01-05 02:35

Sector:

CGM, LLC

Victim: | Group:

UNISALLE.EDU.CO

Ransomware Group:

Discovery Date: 2023-01-04 23:09

Sector:

Universidad de La Salle

Victim: | Group:

SOFTEQ.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Custom Software Development Company - Softeq

Victim: | Group:

MARCELSOLUTION.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Victim: | Group:

ORDEREXPRESS.COM.MX

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Victim: | Group:

LOESCHGROUP.DE

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Loeschgroup – Beschläge, Sicherheits- und Türschließtechnik

Victim: | Group:

SOUTH-STAFFS-WATER.CO.UK

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

South Staffs Water - South Staffordshire Water

Victim: | Group:

APPLEXUS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

SAP Software Solutions - SAP Consulting & Implementation Company

Victim: | Group:

SPINNEYS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Spinneys UAE - Supermarket and Grocery Delivery in Dubai, Abu Dhabi, Al Ain & Fujairah

Victim: | Group:

PRICEDEX.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - Pricedex Software

Victim: | Group:

FERRAN-SERVICES.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

AC & Heating Services in Orlando, FL - HVAC Installation throughout Volusia, Winter Park, Windermere, Oviedo & Lake Mary, FL

Victim: | Group:

LATOURNERIE-WOLFROM.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Latournerie Wolfrom Avocats - France et International depuis 25 ans

Victim: | Group:

ENSSECURITY.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

ENS Security Camera is a Distributor Manufacturer surveillance supplier

Victim: | Group:

FTSUMNERK12.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Fort Sumner Home Page

Victim: | Group:

NEWCOURSECC.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Newcourse Communications - Full-service Data-Processing Print Provider

Victim: | Group:

PERBIT.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Die HR Software mit Wir-Prinzip

Victim: | Group:

888VOIP.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Your value-added distributor - 888VoIP

Victim: | Group:

AFJCONSULTING.NET

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Victim: | Group:

ORBITELECTRIC.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Orbit Industries, Inc.

Victim: | Group:

FAIR-RITE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Index - Fair Rite

Victim: | Group:

JDAVIDTAXLAW.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Access denied

Victim: | Group:

THENOC.NET

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

The Network Operations Company – Providing Managed IT Services

Victim: | Group:

ZISSERFAMILYLAW.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Family Lawyers in Jacksonville, FL - Zisser Family Law

Victim: | Group:

SA1SOLUTIONS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

SA1 Solutions - Award Winning IT Support in Swansea, Cardiff and South Wales

Victim: | Group:

OAKDELL.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Oakdell Egg Farms - Home

Victim: | Group:

ALTERNATIVETECHS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Victim: | Group:

DRIVEANDSHINE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - Drive & Shine

Victim: | Group:

DRC-LAW.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Homepage - Dymond Reagor, PLLC

Victim: | Group:

ALEXIM.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

CAPCARPET.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

CAP Carpet & Flooring Store - Hardwood, Waterproof Tile & Plank Floors, Ceramic Tile, Custom Area Rugs

Group:

JBINSTANTLAWN.NET

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

JB Instant Lawn - Resources

Group:

JCWHITE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

DUTTONFIRM.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Dutton Law Firm - Waterloo Lawyers - Iowa Personal Injury Lawyers

Group:

ENPRECIS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Database Error

Group:

MTMRECOGNITION.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

MUSCHERT-GIERSE.DE

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Unternehmen

Group:

SWIRESPO.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

EDAN.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

EDAN 理邦仪器

Group:

MCH-GROUP.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

SLIMSTOCK.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Slimstock - Experts In Inventory Management Solutions

Group:

QUANTUMGROUP.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

NATUS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Welcome to Natus - Natus

Group:

SMARTERASP.NET

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

SmarterASP.net - Unlimited ASP.NET Web Hosting

Group:

TONLYELE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

通力科技股份有限公司

Group:

SSMSJUSTICE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Singleton Schreiber - Fearless Advocacy

Group:

ABSOLUTERESULTS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Absolute Results - Helping Dealers Sell Cars Today and Tomorrow

Group:

BOLTONUSA.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Bolton

Group:

STRATISVISUALS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

EMPIRICAL-RESEARCH.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

BRPRINTERS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

BLUEBONNETNUTRITION.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Bluebonnet Nutrition-Vitamins-Minerals-Proteins-Herbs-Supplements

Group:

SUNSETHCS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Sunset Healthcare Solutions

Group:

BPATPA.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Benefit Plan Administrators, Inc.

Group:

GENESISNET.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

COMPASSNRG.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

COULSONGROUP.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Coulson Group - Leaders in Innovation

Group:

STORAFILE.CO.UK

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

National Document Management Specialist » Stor-a-File

Group:

KLEINBERGLANGE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Kleinberg Lange Cuddy & Carlo LLP - Entertainment Law Firm

Group:

WDMANOR.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

W.D. Manor Mechanical Contractors - W.D. MANOR MECHANICAL CONTRACTORS, INC.

Group:

MMALTZAN.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

KSSENTERPRISES.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Janitorial Supplies and Equipment - KSS Enterprises

Victim: | Group:

PARAGONGRI.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - Paragon Global Resources

Group:

PENBENS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Pension Benefit Consultants, Inc. – Actuaries and Retirement Plan Administrators

Group:

GOABCO.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

ABCO Automation - Specializing In Factory Automation

Victim: | Group:

ZUCCHETTIKOS.IT

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - ZucchettiKos

Group:

RMICO.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

VALLEYTRUCKANDTRACTOR.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Agriculture & Turf Equipment & Services - Papé Machinery

Group:

KSSARCHITECTS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

KSS Architects

Group:

NFT.CO.UK

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

UTILITYTRAILER.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

AUROBINDO.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Pharmaceutical Manufacturing and Exports, Research and Development in Pharma – Aurobindo Pharma

Group:

FOODLAND.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Foodland Homepage - Foodland

Group:

NIPRO.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Renal & Vascular Medical Devices - Nipro Medical

Group:

PNCPA.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Postlethwaite & Netterville (P&N ) - Louisiana - Mississippi - Texas CPA

Group:

SHELL.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Shell Global

Victim: | Group:

STANFORD.EDU

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Stanford University

Group:

MIAMI.EDU

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

University of Miami

Group:

COLORADO.EDU

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - University of Colorado Boulder

Group:

FLAGSTAR.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Access denied

Group:

BOMBARDIER.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Homepage - Bombardier

Group:

JONESDAY.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Access denied

Group:

DANAHER.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

SINGTEL.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Mobile, Fibre Broadband and TV services provider - Singtel

Group:

SYMRISE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Symrise I Food & Beverage I Pet Food I Aqua Feed I Fragrance I Cosmetic Ingredients I Aroma Molecules - Symrise

Group:

ELANDRETAIL.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

ELAND RETAIL

Group:

PARKLAND.CA

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - Parkland

Group:

SOFTWAREAG.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Software & Technology Services and Solutions - Software AG

Group:

INDIABULLS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Housing Finance - Home Loan Company in India - Indiabulls Home Loans

Group:

EXECUPHARM.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

SGS-LAW.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Not Acceptable!

Group:

RFF.ORG

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Resources for the Future—Healthy Environment, Thriving Economy

Group:

BOUTINEXPRESS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Accueil - Transport Boutin

Group:

SIUMED.EDU

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

SIU School of Medicine Home - SIU School of Medicine

Group:

TRAVELSTORE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

TravelStore: Business and Vacation Travel Consultants - TravelStore

Group:

DURHAM.CA

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Region of Durham

Group:

UNIVERSITYOFCALIFORNIA.EDU

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - University of California

Group:

UMD.EDU

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

The University of Maryland - A Preeminent Public Research University

Group:

YU.EDU

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - Yeshiva University

Group:

MARNELLCOMPANIES.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Marnell Companies - Industry-Leading Casino Architecture and Design Best Architect and Designer in Las Vegas, NV.

Group:

RACETRAC.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

RaceTrac - Whatever Gets You Going

Group:

EDAG.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Ihr ganzheitlicher Engineering-Partner - EDAG Group

Group:

WRIGHT.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Wright Medical Group N.V. - a global medical device company

Group:

QUALYS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

IT Security and Compliance Platform - Qualys, Inc.

Group:

MMOSER.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Home - M Moser Associates

Group:

KINZE.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Group:

NOWFOODS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

NOW Foods - Vitamins and Supplements - Essential Oils

Group:

CSX.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

CSX rail, intermodal and rail-to-truck transload services - CSX.com

Group:

CSAGROUP.ORG

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

TRANSPORT.NSW.GOV.AU

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Homepage - Transport for NSW

Group:

CGG.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

CGG: Global Technology and HPC leader

Group:

STERIS.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 - Forbidden: Access is denied.

Group:

PENTAIR.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Pentair

Group:

FUGRO.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Global offshore and onshore geotechnical and survey services

Group:

EAGLE.ORG

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

American Bureau of Shipping (ABS) Eagle.org

Group:

THE7STARS.CO.UK

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

403 Forbidden

Group:

AMEY.CO.UK

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Personal pride in our public service - Amey plc

Group:

NOVABIOMEDICAL.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Nova Biomedical develops, manufactures, and sells advanced technology blood testing analyzers and meters.

Group:

ALLSTATEPETERBILT.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Midwest New and Used Truck Dealer Group - Allstate Peterbilt Group

Group:

PRETTL.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Prettl - Think global. Act local.

Group:

NETZSCH.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Just a moment...

Group:

PROMINENT.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Experts in Metering Technology and Water Treatment - ProMinent

Group:

PLANATOL.DE

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Ihr Klebstoffhersteller aus Rohrdorf & Herford - PlanatolPlanatol

Group:

TWL.DE

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Technische Werke Ludwigshafen AG (TWL) - Technische Werke Ludwigshafen AG - Meine Energiequelle: Privatkunden

Group:

INRIX.COM

Ransomware Group:

Discovery Date: 2022-12-22 20:02

Sector:

Leading Transportation Analytics Solutions - INRIX

Victim: | Group:

Symrise AG

Ransomware Group:

Discovery Date: 2020-12-13 00:00

Sector: Food and Agriculture

Group:

E-Land Retailer

Ransomware Group:

Discovery Date: 2020-11-22 00:00

Sector: Commercial Facilities

Group:

Software AG

Ransomware Group:

Discovery Date: 2020-10-03 00:00

Sector: Information Technology

Group:

ExecuPharm

Ransomware Group:

Discovery Date: 2020-03-13 00:00

Sector: Chemical

Group:

×

Infostealer information available for

Employees(s)	Customer(s)	Third Party Employee(s)

This information is provided by HudsonRock

×

rule win_clop_auto {

    meta:
        author = "Felix Bilstein - yara-signator at cocacoding dot com"
        date = "2023-07-11"
        version = "1"
        description = "Detects win.clop."
        info = "autogenerated rule brought to you by yara-signator"
        tool = "yara-signator v0.6.0"
        signator_config = "callsandjumps;datarefs;binvalue"
        malpedia_reference = "https://malpedia.caad.fkie.fraunhofer.de/details/win.clop"
        malpedia_rule_date = "20230705"
        malpedia_hash = "42d0574f4405bd7d2b154d321d345acb18834a41"
        malpedia_version = "20230715"
        malpedia_license = "CC BY-SA 4.0"
        malpedia_sharing = "TLP:WHITE"

    /* DISCLAIMER
     * The strings used in this rule have been automatically selected from the
     * disassembly of memory dumps and unpacked files, using YARA-Signator.
     * The code and documentation is published here:
     * https://github.com/fxb-cocacoding/yara-signator
     * As Malpedia is used as data source, please note that for a given
     * number of families, only single samples are documented.
     * This likely impacts the degree of generalization these rules will offer.
     * Take the described generation method also into consideration when you
     * apply the rules in your use cases and assign them confidence levels.
     */


    strings:
        $sequence_0 = { 6a04 6800300000 6887000000 6a00 }
            // n = 4, score = 900
            //   6a04                 | push                4
            //   6800300000           | push                0x3000
            //   6887000000           | push                0x87
            //   6a00                 | push                0

        $sequence_1 = { 83c40c 6860070000 6a40 ff15???????? }
            // n = 4, score = 900
            //   83c40c               | add                 esp, 0xc
            //   6860070000           | push                0x760
            //   6a40                 | push                0x40
            //   ff15????????         |                     

        $sequence_2 = { 56 53 ff15???????? 50 ff15???????? 56 53 }
            // n = 7, score = 800
            //   56                   | push                esi
            //   53                   | push                ebx
            //   ff15????????         |                     
            //   50                   | push                eax
            //   ff15????????         |                     
            //   56                   | push                esi
            //   53                   | push                ebx

        $sequence_3 = { ff15???????? 56 53 8bf8 ff15???????? 8bf0 56 }
            // n = 7, score = 800
            //   ff15????????         |                     
            //   56                   | push                esi
            //   53                   | push                ebx
            //   8bf8                 | mov                 edi, eax
            //   ff15????????         |                     
            //   8bf0                 | mov                 esi, eax
            //   56                   | push                esi

        $sequence_4 = { 6a00 ff15???????? 68???????? 8bd8 }
            // n = 4, score = 800
            //   6a00                 | push                0
            //   ff15????????         |                     
            //   68????????           |                     
            //   8bd8                 | mov                 ebx, eax

        $sequence_5 = { 833d????????00 0f842e0c0000 83ec08 0fae5c2404 8b442404 25807f0000 3d801f0000 }
            // n = 7, score = 700
            //   833d????????00       |                     
            //   0f842e0c0000         | je                  0xc34
            //   83ec08               | sub                 esp, 8
            //   0fae5c2404           | stmxcsr             dword ptr [esp + 4]
            //   8b442404             | mov                 eax, dword ptr [esp + 4]
            //   25807f0000           | and                 eax, 0x7f80
            //   3d801f0000           | cmp                 eax, 0x1f80

        $sequence_6 = { 6683f87f 8d642408 0f85fd0b0000 eb00 }
            // n = 4, score = 700
            //   6683f87f             | cmp                 ax, 0x7f
            //   8d642408             | lea                 esp, [esp + 8]
            //   0f85fd0b0000         | jne                 0xc03
            //   eb00                 | jmp                 2

        $sequence_7 = { db2d???????? b802000000 833d????????00 0f85f0080000 }
            // n = 4, score = 700
            //   db2d????????         |                     
            //   b802000000           | mov                 eax, 2
            //   833d????????00       |                     
            //   0f85f0080000         | jne                 0x8f6

        $sequence_8 = { 50 ff15???????? 83c40c 6860070000 }
            // n = 4, score = 600
            //   50                   | push                eax
            //   ff15????????         |                     
            //   83c40c               | add                 esp, 0xc
            //   6860070000           | push                0x760

        $sequence_9 = { 0f85aa010000 68???????? 8d442450 50 }
            // n = 4, score = 500
            //   0f85aa010000         | jne                 0x1b0
            //   68????????           |                     
            //   8d442450             | lea                 eax, [esp + 0x50]
            //   50                   | push                eax

        $sequence_10 = { 5d c20400 56 ff15???????? 6a00 }
            // n = 5, score = 500
            //   5d                   | pop                 ebp
            //   c20400               | ret                 4
            //   56                   | push                esi
            //   ff15????????         |                     
            //   6a00                 | push                0

        $sequence_11 = { 8b1d???????? 8d85d4f7ffff 68???????? 50 ffd3 8d85d4f7ffff }
            // n = 6, score = 500
            //   8b1d????????         |                     
            //   8d85d4f7ffff         | lea                 eax, [ebp - 0x82c]
            //   68????????           |                     
            //   50                   | push                eax
            //   ffd3                 | call                ebx
            //   8d85d4f7ffff         | lea                 eax, [ebp - 0x82c]

        $sequence_12 = { 8d85bcefffff 50 ff15???????? 68???????? }
            // n = 4, score = 500
            //   8d85bcefffff         | lea                 eax, [ebp - 0x1044]
            //   50                   | push                eax
            //   ff15????????         |                     
            //   68????????           |                     

        $sequence_13 = { ff15???????? 68???????? 8d85dcf7ffff 50 }
            // n = 4, score = 500
            //   ff15????????         |                     
            //   68????????           |                     
            //   8d85dcf7ffff         | lea                 eax, [ebp - 0x824]
            //   50                   | push                eax

        $sequence_14 = { 68???????? 68???????? e8???????? 83c424 6aff }
            // n = 5, score = 500
            //   68????????           |                     
            //   68????????           |                     
            //   e8????????           |                     
            //   83c424               | add                 esp, 0x24
            //   6aff                 | push                -1

        $sequence_15 = { ffd0 c3 8bff 55 8bec 83ec1c 8d4de4 }
            // n = 7, score = 500
            //   ffd0                 | call                eax
            //   c3                   | ret                 
            //   8bff                 | mov                 edi, edi
            //   55                   | push                ebp
            //   8bec                 | mov                 ebp, esp
            //   83ec1c               | sub                 esp, 0x1c
            //   8d4de4               | lea                 ecx, [ebp - 0x1c]

        $sequence_16 = { 6a00 e8???????? 83c408 6aff ff15???????? }
            // n = 5, score = 400
            //   6a00                 | push                0
            //   e8????????           |                     
            //   83c408               | add                 esp, 8
            //   6aff                 | push                -1
            //   ff15????????         |                     

        $sequence_17 = { 83c424 53 50 ffd6 }
            // n = 4, score = 300
            //   83c424               | add                 esp, 0x24
            //   53                   | push                ebx
            //   50                   | push                eax
            //   ffd6                 | call                esi

        $sequence_18 = { 83c40c 33f6 85ff 7428 }
            // n = 4, score = 300
            //   83c40c               | add                 esp, 0xc
            //   33f6                 | xor                 esi, esi
            //   85ff                 | test                edi, edi
            //   7428                 | je                  0x2a

        $sequence_19 = { 6aff ffd7 8b4dfc 33c0 }
            // n = 4, score = 300
            //   6aff                 | push                -1
            //   ffd7                 | call                edi
            //   8b4dfc               | mov                 ecx, dword ptr [ebp - 4]
            //   33c0                 | xor                 eax, eax

        $sequence_20 = { 6a00 51 ffb560e2ffff 50 }
            // n = 4, score = 200
            //   6a00                 | push                0
            //   51                   | push                ecx
            //   ffb560e2ffff         | push                dword ptr [ebp - 0x1da0]
            //   50                   | push                eax

    condition:
        7 of them and filesize < 796672
}