Threats Tagged 'misp-galaxy:country="italy"'

Datacarry ransomware is associated with PFCloud bulletproof hosting services and targets multiple sectors including civil aviation, education, finance, health, insurance, legal, pharmacy, sport, technology, and tourism. The ransomware employs various attack techniques such as exploiting public-facing applications, PowerShell execution, remote desktop protocol access, disabling or modifying security tools, system checks, protocol tunneling, and data exfiltration over command and control channels. It ultimately encrypts data to impact victim organizations. There is no patch available for this threat, and no known exploits in the wild have been reported. The threat has been observed across multiple countries including Belgium, Denmark, France, Greece, Italy, Lithuania, South Africa, Spain, Sweden, Switzerland, Turkey, and the United Kingdom.

MediumMalwareBelgiumDenmarkFrance+9#misp-galaxy:ransomware="datacarry"#misp-galaxy:sector="civil aviation"#misp-galaxy:sector="education"