Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OSINT - CYBER THREATSCAPE  REPORT 2018 - MIDYEAR CYBERSECURITY  RISK REVIEW

The provided information pertains to an OSINT report titled 'CYBER THREATSCAPE REPORT 2018 - MIDYEAR CYBERSECURITY RISK REVIEW' published by CIRCL and cataloged within the MISP galaxy framework. The report references multiple ransomware families such as Wannasmile, Black Ruby, Rastakhiz, and Tyrant, and associates threat actors including Cobalt, FIN7, and Anunak. These actors are known for financially motivated cybercrime campaigns, often targeting financial institutions and enterprises. The report categorizes the threat as malware with a low severity rating and indicates no known exploits in the wild at the time of publication. The technical details assign a threat level of 3 and an analysis rating of 2, suggesting moderate concern but limited immediate impact. The absence of specific affected versions, CWE identifiers, or patch links implies this is a broad situational awareness report rather than a detailed vulnerability disclosure. The inclusion of multiple ransomware variants and financially motivated threat actors highlights the ongoing risk of ransomware campaigns targeting financial sectors. However, the lack of concrete indicators or exploit details limits the ability to pinpoint specific attack vectors or vulnerabilities. Overall, this report serves as an intelligence overview of the mid-2018 cyber threat landscape, emphasizing ransomware threats and financially motivated threat actors without detailing active exploits or vulnerabilities.

Detailed information about OSINT - CYBER THREATSCAPE  REPORT 2018 - MIDYEAR CYBERSECURITY  RISK REVIEW. Get real-time updates, technical details, and mitigation

OSINT - CYBER THREATSCAPE  REPORT 2018 - MIDYEAR CYBERSECURITY  RISK REVIEW - Live Threat Intelligence - Threat Radar | OffSeq.com

OSINT - Black Ruby Ransomware Skips Victims in Iran and Adds a Miner for Good Measure

The Black Ruby ransomware is a malware strain that primarily functions as ransomware but has been observed to incorporate a cryptocurrency miner component, effectively combining ransomware and cryptojacking capabilities. According to open-source intelligence (OSINT) from CIRCL, this malware notably excludes victims located in Iran, which suggests a deliberate geographic targeting or exclusion mechanism embedded within its code or deployment strategy. The ransomware encrypts victim data to demand ransom payments, while the miner component covertly utilizes infected systems' resources to mine cryptocurrency, generating illicit revenue for the attackers. The dual nature of this malware increases its threat profile, as it not only disrupts victim operations through encryption but also degrades system performance and increases power consumption via mining activities. The absence of known exploits in the wild and the lack of specific affected product versions indicate that the malware likely spreads through phishing, malicious downloads, or exploitation of unpatched vulnerabilities in general-purpose software rather than targeting a specific product. The threat level is assessed as moderate (3 out of a higher scale), with a low severity rating assigned by the source, reflecting limited impact or scope at the time of reporting. However, the presence of cryptojacking alongside ransomware capabilities suggests a persistent threat that could evolve. The malware's exclusion of Iranian victims may reflect geopolitical considerations or attacker origin. Overall, Black Ruby represents a hybrid threat combining data encryption and resource hijacking, complicating detection and mitigation efforts.

Detailed information about OSINT - Black Ruby Ransomware Skips Victims in Iran and Adds a Miner for Good Measure. Get real-time updates, technical details, and 

Title	Severity	Type	Source	Date

Threats Tagged 'misp-galaxy:ransomware="black ruby"'

Filter Threats