Trusted Design

InfoArmor Uncovers Malicious Torrent Distribution Network

概要

Security researchers at InfoArmor said they discovered the so-called "RAUM" tool in underground forums. Popular torrent files, especially games, are packaged with malicious coding and then uploaded for unsuspecting users to download. The RAUM tool has been found distributing ransomware such as CryptXXX, in addition to the Trojan Dridex and the password-lifting Pony spyware. The makers of RAUM are believed to be an Eastern European organized crime group known as Black Team. The underground forums where the tool is sold are invite-only, with the verification process of new members quite strict. To infect more users, the makers of RAUM were also on the lookout for known uploaders of torrent files. They would then hijack their accounts, and use them to spread even more malicious torrent files.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Necurs Botnet Fuels Massive Spam Campaigns Spreading Jaff Ransomware (score: 0.64)
Ransomware: Torrent Locker & Zerolocker Associated (score: 0.64)
MHT: Ransomware32 - The First JavaScript Ransomware (score: 0.63)
CryptXXX: New Ransomware From the Actors Behind Reveton (score: 0.63)
RockLoader – New Upatre-like Downloader Pushed by Dridex, (score: 0.63)

このPulseに関連する脅威アクター (事実ベース)

APT41

Score: 4.13

Matched TTPs:

T1069 - Permission Groups Discovery
T1588.002 - Tool

MITREへのリンク →

Scattered Spider

Score: 9.05

Matched TTPs:

T1069 - Permission Groups Discovery
T1598.003 - Spearphishing Link
T1588.001 - Malware
T1588.002 - Tool

MITREへのリンク →

TA505

Score: 8.57

Matched TTPs:

T1069 - Permission Groups Discovery
T1608.001 - Upload Malware
T1588.001 - Malware
T1588.002 - Tool

MITREへのリンク →

Volt Typhoon

Score: 10.35

Matched TTPs:

T1069 - Permission Groups Discovery
T1584.005 - Botnet
T1588.002 - Tool
T1124 - System Time Discovery

MITREへのリンク →

APT3

Score: 6.91

Matched TTPs:

T1069 - Permission Groups Discovery
T1036.010 - Masquerade Account Name

MITREへのリンク →

FIN13

Score: 8.99

Matched TTPs:

T1069 - Permission Groups Discovery
T1036 - Masquerading
T1588.002 - Tool
T1564.001 - Hidden Files and Directories

MITREへのリンク →

OilRig

Score: 19.76

Matched TTPs:

T1025 - Data from Removable Media
T1608.001 - Upload Malware
T1195 - Supply Chain Compromise
T1036 - Masquerading
T1588.002 - Tool
T1137.004 - Outlook Home Page
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Gamaredon Group

Score: 21.01

Matched TTPs:

T1025 - Data from Removable Media
T1608.001 - Upload Malware
T1480 - Execution Guardrails
T1588.002 - Tool
T1001 - Data Obfuscation
T1039 - Data from Network Shared Drive
T1027.015 - Compression

MITREへのリンク →

APT28

Score: 27.62

Matched TTPs:

T1025 - Data from Removable Media
T1598.003 - Spearphishing Link
T1036 - Masquerading
T1588.002 - Tool
T1039 - Data from Network Shared Drive
T1564.001 - Hidden Files and Directories
T1550.001 - Application Access Token
T1669 - Wi-Fi Networks
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

Turla

Score: 12.19

Matched TTPs:

T1025 - Data from Removable Media
T1588.001 - Malware
T1588.002 - Tool
T1124 - System Time Discovery
T1078.003 - Local Accounts

MITREへのリンク →

Sidewinder

Score: 5.05

Matched TTPs:

T1598.003 - Spearphishing Link
T1124 - System Time Discovery

MITREへのリンク →

Mustang Panda

Score: 7.95

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1588.002 - Tool
T1564.001 - Hidden Files and Directories

MITREへのリンク →

Sandworm Team

Score: 18.78

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1195 - Supply Chain Compromise
T1036 - Masquerading
T1584.005 - Botnet
T1588.002 - Tool
T1592.002 - Software

MITREへのリンク →

Silent Librarian

Score: 3.31

Matched TTPs:

T1598.003 - Spearphishing Link
T1588.002 - Tool

MITREへのリンク →

ZIRCONIUM

Score: 7.24

Matched TTPs:

T1598.003 - Spearphishing Link
T1036 - Masquerading
T1124 - System Time Discovery

MITREへのリンク →

APT32

Score: 15.55

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1036 - Masquerading
T1588.002 - Tool
T1218.010 - Regsvr32
T1564.001 - Hidden Files and Directories
T1078.003 - Local Accounts

MITREへのリンク →

Kimsuky

Score: 13.84

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1588.002 - Tool
T1055.012 - Process Hollowing
T1218.010 - Regsvr32
T1078.003 - Local Accounts

MITREへのリンク →

Magic Hound

Score: 10.77

Matched TTPs:

T1598.003 - Spearphishing Link
T1588.002 - Tool
T1592.002 - Software
T1036.010 - Masquerade Account Name

MITREへのリンク →

Star Blizzard

Score: 5.28

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware
T1588.002 - Tool

MITREへのリンク →

Moonstone Sleet

Score: 4.43

Matched TTPs:

T1598.003 - Spearphishing Link
T1608.001 - Upload Malware

MITREへのリンク →

CURIUM

Score: 5.05

Matched TTPs:

T1598.003 - Spearphishing Link
T1124 - System Time Discovery

MITREへのリンク →

Dragonfly

Score: 6.93

Matched TTPs:

T1598.003 - Spearphishing Link
T1588.002 - Tool
T1036.010 - Masquerade Account Name

MITREへのリンク →

Patchwork

Score: 6.46

Matched TTPs:

T1598.003 - Spearphishing Link
T1588.002 - Tool
T1055.012 - Process Hollowing

MITREへのリンク →

TA2541

Score: 14.33

Matched TTPs:

T1608.001 - Upload Malware
T1588.001 - Malware
T1588.002 - Tool
T1055.012 - Process Hollowing
T1573.002 - Asymmetric Cryptography
T1027.015 - Compression

MITREへのリンク →

Earth Lusca

Score: 5.28

Matched TTPs:

T1608.001 - Upload Malware
T1588.001 - Malware
T1588.002 - Tool

MITREへのリンク →

LuminousMoth

Score: 7.95

Matched TTPs:

T1608.001 - Upload Malware
T1588.001 - Malware
T1588.002 - Tool
T1564.001 - Hidden Files and Directories

MITREへのリンク →

Mustard Tempest

Score: 6.51

Matched TTPs:

T1608.001 - Upload Malware
T1608.006 - SEO Poisoning

MITREへのリンク →

TeamTNT

Score: 4.16

Matched TTPs:

T1608.001 - Upload Malware
T1036 - Masquerading

MITREへのリンク →

LazyScripter

Score: 6.62

Matched TTPs:

T1608.001 - Upload Malware
T1036 - Masquerading
T1588.001 - Malware

MITREへのリンク →

Threat Group-3390

Score: 13.26

Matched TTPs:

T1608.001 - Upload Malware
T1608.002 - Upload Tool
T1588.002 - Tool
T1055.012 - Process Hollowing
T1027.015 - Compression

MITREへのリンク →

BlackByte

Score: 8.97

Matched TTPs:

T1608.001 - Upload Malware
T1480 - Execution Guardrails
T1055.012 - Process Hollowing

MITREへのリンク →

Contagious Interview

Score: 8.85

Matched TTPs:

T1608.001 - Upload Malware
T1036 - Masquerading
T1480 - Execution Guardrails
T1588.002 - Tool

MITREへのリンク →

FIN7

Score: 10.75

Matched TTPs:

T1608.001 - Upload Malware
T1588.002 - Tool
T1564.001 - Hidden Files and Directories
T1124 - System Time Discovery
T1078.003 - Local Accounts

MITREへのリンク →

APT42

Score: 5.57

Matched TTPs:

T1608.001 - Upload Malware
T1588.002 - Tool
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Ember Bear

Score: 8.49

Matched TTPs:

T1195 - Supply Chain Compromise
T1036 - Masquerading
T1588.001 - Malware

MITREへのリンク →

menuPass

Score: 9.22

Matched TTPs:

T1036 - Masquerading
T1588.002 - Tool
T1039 - Data from Network Shared Drive
T1055.012 - Process Hollowing

MITREへのリンク →

BRONZE BUTLER

Score: 8.66

Matched TTPs:

T1036 - Masquerading
T1588.002 - Tool
T1039 - Data from Network Shared Drive
T1124 - System Time Discovery

MITREへのリンク →

Aoqin Dragon

Score: 3.04

Matched TTPs:

T1036 - Masquerading
T1588.002 - Tool

MITREへのリンク →

Storm-1811

Score: 6.66

Matched TTPs:

T1036 - Masquerading
T1588.002 - Tool
T1036.010 - Masquerade Account Name

MITREへのリンク →

TA551

Score: 4.93

Matched TTPs:

T1036 - Masquerading
T1218.010 - Regsvr32

MITREへのリンク →

Medusa Group

Score: 16.80

Matched TTPs:

T1608.002 - Upload Tool
T1588.002 - Tool
T1573.002 - Asymmetric Cryptography
T1650 - Acquire Access
T1218.014 - MMC

MITREへのリンク →

LAPSUS$

Score: 3.31

Matched TTPs:

T1588.001 - Malware
T1588.002 - Tool

MITREへのリンク →

Metador

Score: 3.31

Matched TTPs:

T1588.001 - Malware
T1588.002 - Tool

MITREへのリンク →

APT1

Score: 3.31

Matched TTPs:

T1588.001 - Malware
T1588.002 - Tool

MITREへのリンク →

Aquatic Panda

Score: 3.31

Matched TTPs:

T1588.001 - Malware
T1588.002 - Tool

MITREへのリンク →

UNC3886

Score: 5.05

Matched TTPs:

T1588.001 - Malware
T1124 - System Time Discovery

MITREへのリンク →

Andariel

Score: 6.30

Matched TTPs:

T1588.001 - Malware
T1592.002 - Software

MITREへのリンク →

BackdoorDiplomacy

Score: 3.31

Matched TTPs:

T1588.001 - Malware
T1588.002 - Tool

MITREへのリンク →

HAFNIUM

Score: 13.09

Matched TTPs:

T1584.005 - Botnet
T1564.001 - Hidden Files and Directories
T1550.001 - Application Access Token
T1078.003 - Local Accounts

MITREへのリンク →

Axiom

Score: 3.62

Matched TTPs:

T1584.005 - Botnet

MITREへのリンク →

APT33

Score: 4.98

Matched TTPs:

T1552.006 - Group Policy Preferences
T1588.002 - Tool

MITREへのリンク →

Wizard Spider

Score: 4.98

Matched TTPs:

T1552.006 - Group Policy Preferences
T1588.002 - Tool

MITREへのリンク →

Inception

Score: 3.60

Matched TTPs:

T1588.002 - Tool
T1218.010 - Regsvr32

MITREへのリンク →

APT29

Score: 3.52

Matched TTPs:

T1588.002 - Tool
T1078.003 - Local Accounts

MITREへのリンク →

FIN8

Score: 3.60

Matched TTPs:

T1588.002 - Tool
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

FIN6

Score: 3.60

Matched TTPs:

T1588.002 - Tool
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Sea Turtle

Score: 3.52

Matched TTPs:

T1588.002 - Tool
T1078.003 - Local Accounts

MITREへのリンク →

WIRTE

Score: 3.60

Matched TTPs:

T1588.002 - Tool
T1218.010 - Regsvr32

MITREへのリンク →

Cobalt Group

Score: 6.34

Matched TTPs:

T1588.002 - Tool
T1218.010 - Regsvr32
T1573.002 - Asymmetric Cryptography

MITREへのリンク →

Lazarus Group

Score: 6.11

Matched TTPs:

T1588.002 - Tool
T1564.001 - Hidden Files and Directories
T1124 - System Time Discovery

MITREへのリンク →

FIN10

Score: 3.52

Matched TTPs:

T1588.002 - Tool
T1078.003 - Local Accounts

MITREへのリンク →

Gorgon Group

Score: 4.00

Matched TTPs:

T1588.002 - Tool
T1055.012 - Process Hollowing

MITREへのリンク →

Chimera

Score: 6.48

Matched TTPs:

T1588.002 - Tool
T1039 - Data from Network Shared Drive
T1124 - System Time Discovery

MITREへのリンク →

Play

Score: 3.52

Matched TTPs:

T1588.002 - Tool
T1078.003 - Local Accounts

MITREへのリンク →

APT19

Score: 3.60

Matched TTPs:

T1588.002 - Tool
T1218.010 - Regsvr32

MITREへのリンク →

Blue Mockingbird

Score: 8.13

Matched TTPs:

T1588.002 - Tool
T1218.010 - Regsvr32
T1574.012 - COR_PROFILER

MITREへのリンク →

RedCurl

Score: 8.45

Matched TTPs:

T1039 - Data from Network Shared Drive
T1573.002 - Asymmetric Cryptography
T1564.001 - Hidden Files and Directories

MITREへのリンク →

Sowbug

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Fox Kitten

Score: 3.03

Matched TTPs:

T1039 - Data from Network Shared Drive

MITREへのリンク →

Leviathan

Score: 5.90

Matched TTPs:

T1218.010 - Regsvr32
T1027.015 - Compression

MITREへのリンク →

Velvet Ant

Score: 9.54

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1078.003 - Local Accounts
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

Tropic Trooper

Score: 8.08

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1564.001 - Hidden Files and Directories
T1078.003 - Local Accounts

MITREへのリンク →

Higaisa

Score: 5.74

Matched TTPs:

T1124 - System Time Discovery
T1027.015 - Compression

MITREへのリンク →

Molerats

Score: 3.15

Matched TTPs:

T1027.015 - Compression

MITREへのリンク →

Mofang

Score: 3.15

Matched TTPs:

T1027.015 - Compression

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

APT28

Score: 0.81

Matched TTPs:

T1550.001 - Application Access Token
T1036 - Masquerading
T1564.001 - Hidden Files and Directories
T1588.002 - Tool
T1211 - Exploitation for Defense Evasion
T1039 - Data from Network Shared Drive
T1669 - Wi-Fi Networks
T1598.003 - Spearphishing Link
T1025 - Data from Removable Media

MITREへのリンク →

Gamaredon Group

Score: 0.64

Matched TTPs:

T1588.002 - Tool
T1025 - Data from Removable Media
T1608.001 - Upload Malware
T1039 - Data from Network Shared Drive
T1027.015 - Compression
T1480 - Execution Guardrails
T1001 - Data Obfuscation

MITREへのリンク →

Medusa Group

Score: 0.60

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1650 - Acquire Access
T1608.002 - Upload Tool
T1588.002 - Tool
T1218.014 - MMC

MITREへのリンク →

OilRig

Score: 0.59

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1036 - Masquerading
T1195 - Supply Chain Compromise
T1137.004 - Outlook Home Page
T1588.002 - Tool
T1608.001 - Upload Malware
T1025 - Data from Removable Media

MITREへのリンク →

Sandworm Team

Score: 0.59

Matched TTPs:

T1195 - Supply Chain Compromise
T1036 - Masquerading
T1588.002 - Tool
T1608.001 - Upload Malware
T1592.002 - Software
T1598.003 - Spearphishing Link
T1584.005 - Botnet

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る