Vice Society Ransomware Group Targets Manufacturing Companies

Highlights findings on Vice Society, which includes an end-to-end infection diagram that was created using internal telemetry.

REFERENCES: https://www.trendmicro.com/en_us/research/23/a/vice-society-ransomware-group-targets-manufacturing-companies.html

https://www.trendmicro.com/content/dam/trendmicro/global/en/research/23/vice-society-ransomware-group-targets-manufacturing-companies/iocs-vice-society-ransomware-group-targets-manufacturing-companies-full.txt

TAGS: Vice Society, RaaS, Colbalt Strike, Mimikatz, Hyper-V

ADVERSARY: Vice Society

INDUSTRY: Manufacturing

TARGETED COUNTRIES: Israel, Switzerland, Argentina, Brazil

MALWARE FAMILIES: Ransom.Win64.VICESOCIETY.A, Zeppelin Ransomware, Virus:Win32/Neshta, Hello Kitty, FiveHands

ATT&CK IDS: T1021 - Remote Services, T1190 - Exploit Public-Facing Application, T1070 - Indicator Removal on Host, T1136 - Create Account, T1003 - OS Credential Dumping

Read More:

https://otx.alienvault.com/pulse/63d130332d6600e9b207cda7