Serbian security researcher GrujaRS shared with Softpedia a ransomware project called Shark, freely distributed on the Deep Web, but which appears to be a scam at a closer inspection, even if it produces valid and running ransomware payloads.
Anyone can download a version of the Shark builder from the Shark Ransomware Project's homepage, which is not on the Dark Web (Tor/I2P), nor is it freely reachable via Google, being on that section of the public Internet where search and indexing bots can't reach it.
Users get a ZIP file (which appears to be carrying a secret friend) that unpacks into three files: ReadMe.txt, Payload Builder.exe, and Shark.exe. The ReadMe.txt file reads:
[CITATION]Attention! We recommend you to use a virtual machine when working with this files. And do not run payload.exe on your PC. Good luck![/CITATION]
Shark.exe is a ver...
Intelligence View
⚡ tsecurity.de Intelligence
Scammy-Looking Shark Project Delivers Fully Working Ransomware - EXCLUSIVE
Serbian security researcher GrujaRS shared with Softpedia a ransomware project called Shark, freely distributed on the Deep Web, but which appears to be a scam at a closer inspection, even if it produces valid and running ransomware…
Reagiere als Erste:r — dein Feedback zählt!
2. Cyber Threat Intelligence & Forensik
CTI Threat Relationship Graph4 Knoten / 3 Relationen
MITRE ATT&CK Matrix Navigator 14 Taktiken
1 belegte TechnikenLive-Mapping
Reconnaissance
–
Resource Development
–
Initial Access
–
Execution
–
Persistence
–
Privilege Escalation
–
Defense Evasion
–
Credential Access
–
Discovery
–
Lateral Movement
–
Collection
–
Command and Control
–
Exfiltration
–
Impact