Threat Assessment: Egregor Ransomware
Unit 42 assesses Egregor ransomware, a Sekhmet variant likely run by former Maze affiliates using Qakbot, IcedID, and Ursnif for initial access.
55
Malware
Qakbot
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
1 articles · newest firstAppears with
- Palo Alto Networksvendor · 1
- Ursnifmalware · 1
- McAfeevendor · 1
- Cobalt Strikemalware · 1
- IcedIDmalware · 1
- Unit 42organization · 1
- Trickbotmalware · 1
- Egregormalware · 1
- Cortex XDRproduct · 1
- Palo Alto Networksorganization · 1
- Sekhmetmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.