Trusted Design

Fallout Exploit Kit Releases the Kraken Ransomware on Its Victims

概要

Rising from the deep, Kraken Cryptor ransomware has had a notable development path in recent months. The first signs of Kraken came in mid-August on a popular underground forum. In mid-September it was reported that the malware developer had placed the ransomware, masquerading as a security solution, on the website SuperAntiSpyware, infecting systems that tried to download a legitimate version of the antispyware software. Kraken’s presence became more apparent at the end of September, when the security researcher nao_sec discovered that the Fallout Exploit Kit, known for delivering GandCrab ransomware, also started to deliver Kraken.

Created: 2026-02-23

Indicators

類似Pulses

Kraken Cryptor Ransomware Gains Popularity Among Cybercriminals (score: 0.74)
Analysis of a piece of ransomware in development (CryptoApp) (score: 0.67)
CryptoApp ransomware: changes & active campaign (score: 0.66)
CryptXXX: New Ransomware From the Actors Behind Reveton (score: 0.63)
MarsJoke Ransomware Mimics CTB-Locker (score: 0.63)

このPulseに関連する脅威アクター (事実ベース)

Mustard Tempest

Score: 10.84

Matched TTPs:

T1682 - Query Public AI Services
T1059.012 - Hypervisor CLI
T1543.002 - Systemd Service

MITREへのリンク →

APT41

Score: 3.29

Matched TTPs:

T1560.003 - Archive via Custom Method

MITREへのリンク →

Scattered Spider

Score: 3.29

Matched TTPs:

T1560.003 - Archive via Custom Method

MITREへのリンク →

TA505

Score: 3.29

Matched TTPs:

T1560.003 - Archive via Custom Method

MITREへのリンク →

Volt Typhoon

Score: 3.29

Matched TTPs:

T1560.003 - Archive via Custom Method

MITREへのリンク →

APT3

Score: 3.29

Matched TTPs:

T1560.003 - Archive via Custom Method

MITREへのリンク →

FIN13

Score: 5.47

Matched TTPs:

T1560.003 - Archive via Custom Method
T1558 - Steal or Forge Kerberos Tickets

MITREへのリンク →

APT32

Score: 6.70

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1027.014 - Polymorphic Code
T1059.012 - Hypervisor CLI

MITREへのリンク →

Contagious Interview

Score: 6.03

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1126 - Network Share Connection Removal

MITREへのリンク →

BRONZE BUTLER

Score: 3.95

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1059.012 - Hypervisor CLI

MITREへのリンク →

OilRig

Score: 4.93

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1128 - Netsh Helper DLL

MITREへのリンク →

Ember Bear

Score: 6.32

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1003.003 - NTDS

MITREへのリンク →

APT28

Score: 8.08

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1059.012 - Hypervisor CLI
T1566.003 - Spearphishing via Service

MITREへのリンク →

Windshift

Score: 3.95

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1059.012 - Hypervisor CLI

MITREへのリンク →

Winter Vivern

Score: 3.95

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1059.012 - Hypervisor CLI

MITREへのリンク →

TA551

Score: 4.93

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1027.014 - Polymorphic Code

MITREへのリンク →

PLATINUM

Score: 3.95

Matched TTPs:

T1558 - Steal or Forge Kerberos Tickets
T1059.012 - Hypervisor CLI

MITREへのリンク →

Gamaredon Group

Score: 4.54

Matched TTPs:

T1061 - Graphical User Interface

MITREへのリンク →

Cobalt Group

Score: 5.49

Matched TTPs:

T1027.014 - Polymorphic Code
T1128 - Netsh Helper DLL

MITREへのリンク →

Leviathan

Score: 4.51

Matched TTPs:

T1027.014 - Polymorphic Code
T1059.012 - Hypervisor CLI

MITREへのリンク →

Kimsuky

Score: 10.72

Matched TTPs:

T1027.014 - Polymorphic Code
T1126 - Network Share Connection Removal
T1003.003 - NTDS

MITREへのリンク →

APT19

Score: 4.51

Matched TTPs:

T1027.014 - Polymorphic Code
T1059.012 - Hypervisor CLI

MITREへのリンク →

Velvet Ant

Score: 6.88

Matched TTPs:

T1128 - Netsh Helper DLL
T1566.003 - Spearphishing via Service

MITREへのリンク →

Medusa Group

Score: 6.37

Matched TTPs:

T1128 - Netsh Helper DLL
T1216 - System Script Proxy Execution

MITREへのリンク →

Lazarus Group

Score: 13.36

Matched TTPs:

T1567.002 - Exfiltration to Cloud Storage
T1059.012 - Hypervisor CLI
T1055.005 - Thread Local Storage
T1216 - System Script Proxy Execution

MITREへのリンク →

Mustang Panda

Score: 7.98

Matched TTPs:

T1567.002 - Exfiltration to Cloud Storage
T1055.005 - Thread Local Storage

MITREへのリンク →

Higaisa

Score: 3.84

Matched TTPs:

T1567.002 - Exfiltration to Cloud Storage

MITREへのリンク →

APT38

Score: 5.39

Matched TTPs:

T1059.012 - Hypervisor CLI
T1216 - System Script Proxy Execution

MITREへのリンク →

APT37

Score: 5.39

Matched TTPs:

T1059.012 - Hypervisor CLI
T1216 - System Script Proxy Execution

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1130 - Install Root Certificate

MITREへのリンク →

Moonstone Sleet

Score: 3.84

Matched TTPs:

T1126 - Network Share Connection Removal

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Lazarus Group

Score: 0.81

Matched TTPs:

T1059.012 - Hypervisor CLI
T1055.005 - Thread Local Storage
T1216 - System Script Proxy Execution
T1567.002 - Exfiltration to Cloud Storage

MITREへのリンク →

Mustard Tempest

Score: 0.72

Matched TTPs:

T1543.002 - Systemd Service
T1059.012 - Hypervisor CLI
T1682 - Query Public AI Services

MITREへのリンク →

Kimsuky

Score: 0.66

Matched TTPs:

T1003.003 - NTDS
T1126 - Network Share Connection Removal
T1027.014 - Polymorphic Code

MITREへのリンク →

APT28

Score: 0.55

Matched TTPs:

T1566.003 - Spearphishing via Service
T1059.012 - Hypervisor CLI
T1558 - Steal or Forge Kerberos Tickets

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る