Check PointPublished
Agrius Deploys Moneybird in Targeted Attacks Against Israeli Organizations
By etal
Excerpt
Key Points
Iranian threat actor Agrius continues to operate against Israeli targets, masking destructive influence operations as ransomware attacks.
In recent attacks the group deployed Moneybird, a previously unseen ransomware written in C++.
Despite presenting themselves as a new group with the name– Moneybird, this is yet another Agrius alias. The data was eventually leaked through one of Agrius previous aliases.
As demonstrated in the Moneybird attacks, Agrius’s techniques, tactics and procedures (TTP) remain largely unchanged.
Introduction
While responding to a ransomware attack against an Israeli organization, the Check Point Incide…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Check Point on research.checkpoint.com.
Mentioned in the excerpt
More from Check Point88
- Gozi: The Malware with a Thousand FacesCheck Point · Published 28 Aug 2020
- Shattering the Dream - When a Job Offer Becomes a Zero-Day AttackCheck Point · Published 11 Aug
- Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution EcosystemCheck Point · Published 3 Jun
- Cavern Manticore: Exposing Iran-Linked Modular C2 FrameworkCheck Point · Published 6 Jul
On the same topics
- Etude de cas : Comment Hunters International et ses affiliés ciblentSynacktiv · Added 25 Oct
- Inside Trickbot, Russia’s Notorious Ransomware GangWIRED · Published 1 Feb 2022
- darkraas-ransomware-intelligence-datacyberpress.org · Added 19 Oct
- Ragnar LoaderPRODAFT · Added 18 Oct
