Trusted Design

InfoArmor Uncovers Malicious Torrent Distribution Network

概要

Security researchers at InfoArmor said they discovered the so-called "RAUM" tool in underground forums. Popular torrent files, especially games, are packaged with malicious coding and then uploaded for unsuspecting users to download. The RAUM tool has been found distributing ransomware such as CryptXXX, in addition to the Trojan Dridex and the password-lifting Pony spyware. The makers of RAUM are believed to be an Eastern European organized crime group known as Black Team. The underground forums where the tool is sold are invite-only, with the verification process of new members quite strict. To infect more users, the makers of RAUM were also on the lookout for known uploaders of torrent files. They would then hijack their accounts, and use them to spread even more malicious torrent files.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Necurs Botnet Fuels Massive Spam Campaigns Spreading Jaff Ransomware (score: 0.64)
• Ransomware: Torrent Locker & Zerolocker Associated (score: 0.64)
• MHT: Ransomware32 - The First JavaScript Ransomware (score: 0.63)
• CryptXXX: New Ransomware From the Actors Behind Reveton (score: 0.63)
• RockLoader – New Upatre-like Downloader Pushed by Dridex, (score: 0.63)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る