Exploit-DB RSS Feed

Reddit NetSec

AlienVault OTX General

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

CVE Database V5

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OSINT - BitPaymer Source Code Fork: Meet DoppelPaymer Ransomware and Dridex 2.0

The threat described involves the DoppelPaymer ransomware, which is a fork of the BitPaymer ransomware source code, combined with elements related to Dridex 2.0 malware. BitPaymer ransomware is known for encrypting victim files and demanding ransom payments, often targeting enterprise environments. DoppelPaymer inherits many characteristics from BitPaymer but has evolved with modifications that may enhance its capabilities or evade detection. Dridex is a well-known banking Trojan primarily used to steal banking credentials and facilitate financial fraud. The mention of Dridex 2.0 suggests that this threat actor or malware family may be combining ransomware and banking Trojan functionalities or leveraging Dridex infrastructure for distribution or payload delivery. The threat actor linked to this malware is Indrik Spider, which is associated with financially motivated cybercrime campaigns. Although the severity is marked as low and no known exploits in the wild are reported, the perpetual lifetime tag indicates this threat remains relevant over time. The technical details are limited, but the combination of ransomware and banking Trojan elements suggests a multi-faceted threat capable of data encryption and credential theft. This OSINT report from CIRCL and Malpedia provides intelligence on the malware's lineage and threat actor attribution, useful for detection and response strategies.

Detailed information about OSINT - BitPaymer Source Code Fork: Meet DoppelPaymer Ransomware and Dridex 2.0. Get real-time updates, technical details, and mitiga

OSINT - BitPaymer Source Code Fork: Meet DoppelPaymer Ransomware and Dridex 2.0 - Live Threat Intelligence - Threat Radar | OffSeq.com

OSINT - Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware

The threat actor known as INDRIK SPIDER has evolved from conducting Dridex-related wire fraud operations to deploying BitPaymer targeted ransomware campaigns. Initially, INDRIK SPIDER was primarily associated with Dridex, a banking Trojan used to facilitate wire fraud by stealing banking credentials and enabling unauthorized financial transactions. Over time, the group shifted tactics towards Big Game Hunting (BGH), focusing on high-value targets with tailored ransomware attacks using BitPaymer. BitPaymer ransomware is known for encrypting critical data on compromised systems and demanding substantial ransom payments, often targeting enterprise environments. This evolution demonstrates a strategic shift from financially motivated fraud to disruptive ransomware campaigns aimed at organizations capable of paying large ransoms. The threat actor employs targeted intrusion techniques, likely involving spear-phishing, exploitation of vulnerabilities, and lateral movement within networks to maximize impact. While no specific affected software versions or exploits in the wild are documented in this report, the threat level is moderate, reflecting the sophistication and potential impact of their operations. The analysis is based on open-source intelligence (OSINT) and highlights the increasing risk posed by INDRIK SPIDER to organizations globally, especially those with valuable data and critical infrastructure.

Detailed information about OSINT - Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware. Get real-time updat

OSINT - Big Game Hunting: The Evolution of INDRIK SPIDER From Dridex Wire Fraud to BitPaymer Targeted Ransomware - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'misp-galaxy:threat-actor="indrik spider"'

Filter Threats