Threats Tagged 'aes-256 gcm'
View all threats tagged with 'aes-256 gcm'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'aes-256 gcm'
Click on any threat for detailed analysis and mitigation recommendations
The CyberVolk ransomware, emerging in May 2024, targets public institutions and key infrastructures of anti-Russian countries. It uses a double encryption structure with AES-256 GCM and ChaCha20-Poly1305 algorithms. The ransomware excludes certain files and directories from encryption and uses a symmetric key generated before the main function starts. A unique nonce is generated for each file encryption, but it's not stored, making decryption impossible. The ransomware includes a disguised decryption logic that fails due to an incorrect nonce value. This pro-Russian group communicates via Telegram and has claimed attacks on major facilities in Japan, France, and the UK. Join the discussion | AlienVault OTX General | 09/12/2025, 07:44:08 UTC Added: 09/12/2025, 08:11:38 UTC |
Showing 1 to 1 of 1 result