ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Malware

CrypMIC

0 mentions in 7 days · 1 in 30 days · 1 total · first seen · last

Search everything

Timeline

Campaign Evolution: pseudo

Unit 42 traces the pseudo-Darkleech campaign's 2016 shift from Angler to Neutrino to Rig exploit kits and rotating ransomware payloads.

Unit 42 documents how the pseudo-Darkleech exploit kit campaign evolved through 2016, switching from Angler EK to Neutrino EK in June and to Rig EK in September after Neutrino ceased operations. Payloads rotated from TeslaCrypt to CryptXXX, CrypMIC, and finally Cerber ransomware by October 2016. Injected script on compromised websites changed from 12,000-18,000 character obfuscated blocks to short, unobfuscated hidden iframes starting July 1, 2016.

Palo Alto Unit 42 · 29d agoThreat actor in the wild

Appears with

threat actor pseudo-Darkleech 1malware Cerber 1malware CryptXXX 1malware TeslaCrypt 1organization Palo Alto Networks 1product AutoFocus 1product Traps 1vendor Palo Alto Networks 1
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.