CryptoBit: Another Ransomware Family Gets an Update
Palo Alto Unit 42 analyzes updated CryptoBit ransomware distributed via the Rig exploit kit, documenting IOCs, eight sample hashes, and disguise tactics from June 2016.
15
Malware
Rig exploit kit
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
2 articles · newest firstDecline in Rig Exploit Kit
Rig exploit kit activity dropped roughly 75% after the pseudo-Darkleech and EITest campaigns stopped using EKs, reflecting an overall decline in exploit kit activity.
15
Appears with
- pseudo-Darkleechthreat actor · 1
- CryptoBitmalware · 1
- Palo Alto Networksvendor · 1
- EITestthreat actor · 1
- RSA Researchvendor · 1
- Flash Playerproduct · 1
- Seamlessthreat actor · 1
- RoughTedthreat actor · 1
- Cisco Talosvendor · 1
- Panda Securityvendor · 1
- Proofpointvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.