Trusted Design

CryptXXX Ransomware Learns the Samba, Other New Tricks

概要

This new round of updates means that even if users are able to decrypt their files, whether through an updated third-party tool or by paying the ransom, CryptXXX can still cause significant downtime by encrypting files on network shares. In this post, we also detail for the first time the StillerX module that underlies the information-stealing capabilities in CryptXXX and allows threat actors to sell credentials or launch targeted attacks. Previously, CryptXXX, like many other ransomware infections, copied the layout and design of CryptoWall. With this recent update, they have now created their own template and changed the name of their decryptor to UltraDeCrypter.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• CryptoWall v4 Emerges Days After Cyber Threat Alliance Report (score: 0.72)
• CryptXXX: New Ransomware From the Actors Behind Reveton (score: 0.70)
• StorageCrypt ransomware, a coinminer and more (score: 0.70)
• CRYPTOWALL 4 - THE EVOLUTION CONTINUES (score: 0.68)
• CryptoDefense Ransomeware (score: 0.66)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る