Trusted Design

Bucbi Ransomware Is Back With a Ukrainian Makeover

概要

The Bucbi ransomware family, which dates back to early 2014, has received a significant update. In a recently observed attack, we also noted new tactics used to infect systems. The malware has historically been delivered via an HTTP download, most likely via an exploit kit or phishing email. However, in recent weeks, Palo Alto Networks researchers have observed attackers brute-forcing RDP accounts on Internet-facing Windows servers to deliver their malware. Additionally, the malware itself has been modified to no longer require an Internet connection.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• New ransomware, old techniques: Petya adds worm capabilities Windows Security (score: 0.66)
• Targeted ransomware campaign (score: 0.64)
• Analysis of a piece of ransomware in development (CryptoApp) (score: 0.63)
• Petya Ransomware Fast Spreading Attack (score: 0.62)
• More ransomware shenanigans (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る