50attributed CVEs
0ATT&CK techniques
141.5IDF score (tooling uniqueness)
0exclusive CVEs
2017–2024years active
About this actor
Observed for the first time in Febuary 2019, variant from CryptoMix Family, itself a variation from CryptXXX and CryptoWall family
How we know this
- Data origin
- MISP threat-actor galaxy Imported from the open-source MISP threat-actor galaxy.
- Techniques
- No ATT&CK techniques mapped.
- Named victims
- None on file.
Thin data: No ATT&CK techniques are mapped yet — the behavioural profile is empty.
See how actor data is built for the full pipeline.
Activity timeline
CVE publishedKEV added
- 2024 — 2 KEV added
- 2023 — 30 CVE published, 29 KEV added
- 2022 — 5 CVE published, 5 KEV added
- 2021 — 9 CVE published, 11 KEV added
- 2020 — 1 CVE published
- 2019 — 4 CVE published
- 2017 — 1 CVE published
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
CVE-2019-11510 KEV | 10.0 | 10.0 | 1.0000 | 2019-05-08 | see CVE |
CVE-2021-22205 KEV | 10.0 | 10.0 | 0.9973 | 2021-04-23 | see CVE |
CVE-2021-44228 KEV | 10.0 | 10.0 | 1.0000 | 2021-12-10 | see CVE |
CVE-2023-20198 KEV | 10.0 | 10.0 | 0.9957 | 2023-10-16 | see CVE |
CVE-2023-49103 KEV | 10.0 | 10.0 | 0.9647 | 2023-11-21 | see CVE |
CVE-2019-0708 KEV | 9.9 | 9.8 | 1.0000 | 2019-05-16 | see CVE |
CVE-2019-18935 KEV | 9.9 | 9.8 | 0.9974 | 2019-12-11 | see CVE |
CVE-2021-22986 KEV | 9.9 | 9.8 | 0.9990 | 2021-03-31 | see CVE |
CVE-2021-26084 KEV | 9.9 | 9.8 | 1.0000 | 2021-08-30 | see CVE |
CVE-2021-27860 KEV | 9.9 | 9.8 | 0.4256 | 2021-12-08 | see CVE |
CVE-2021-33044 KEV | 9.9 | 9.8 | 0.9999 | 2021-09-15 | see CVE |
CVE-2021-33045 KEV | 9.9 | 9.8 | 0.9959 | 2021-09-15 | see CVE |
CVE-2021-40539 KEV | 9.9 | 9.8 | 0.9896 | 2021-09-07 | see CVE |
CVE-2022-26134 KEV | 9.9 | 9.8 | 1.0000 | 2022-06-03 | see CVE |
CVE-2022-31199 KEV | 9.9 | 9.8 | 0.5343 | 2022-11-08 | see CVE |
CVE-2022-3236 KEV | 9.9 | 9.8 | 0.9890 | 2022-09-23 | see CVE |
CVE-2022-47966 KEV | 9.9 | 9.8 | 0.9975 | 2023-01-18 | see CVE |
CVE-2023-22515 KEV | 9.9 | 9.8 | 0.9970 | 2023-10-04 | see CVE |
CVE-2023-22518 KEV | 9.9 | 9.8 | 1.0000 | 2023-10-31 | see CVE |
CVE-2023-23397 KEV | 9.9 | 9.8 | 0.9741 | 2023-03-14 | see CVE |
CVE-2023-27350 KEV | 9.9 | 9.8 | 1.0000 | 2023-04-20 | see CVE |
CVE-2023-27997 KEV | 9.9 | 9.8 | 0.9242 | 2023-06-13 | see CVE |
CVE-2023-29492 KEV | 9.9 | 9.8 | 0.1876 | 2023-04-11 | see CVE |
CVE-2023-34362 KEV | 9.9 | 9.8 | 0.9993 | 2023-06-02 | see CVE |
CVE-2023-35078 KEV | 9.9 | 9.8 | 1.0000 | 2023-07-25 | see CVE |
CVE-2023-3519 KEV | 9.9 | 9.8 | 0.9975 | 2023-07-19 | see CVE |
CVE-2023-36845 KEV | 9.9 | 9.8 | 0.9719 | 2023-08-17 | see CVE |
CVE-2023-42793 KEV | 9.9 | 9.8 | 0.9999 | 2023-09-19 | see CVE |
CVE-2023-6448 KEV | 9.9 | 9.8 | 0.1525 | 2023-12-05 | see CVE |
CVE-2023-2868 KEV | 9.7 | 9.4 | 0.9145 | 2023-05-24 | see CVE |
CVE-2023-4966 KEV | 9.7 | 9.4 | 1.0000 | 2023-10-10 | see CVE |
CVE-2018-13379 KEV | 9.5 | 9.1 | 1.0000 | 2019-06-04 | see CVE |
CVE-2021-34473 KEV | 9.5 | 9.1 | 1.0000 | 2021-07-14 | see CVE |
CVE-2017-6742 KEV | 9.2 | 8.8 | 0.2142 | 2017-07-17 | see CVE |
CVE-2022-41040 KEV | 9.2 | 8.8 | 0.9996 | 2022-10-03 | see CVE |
CVE-2021-4034 KEV | 8.5 | 7.8 | 0.9492 | 2022-01-28 | see CVE |
CVE-2023-38831 KEV | 8.5 | 7.8 | 0.9981 | 2023-08-23 | see CVE |
CVE-2023-41061 KEV | 8.5 | 7.8 | 0.0441 | 2023-09-07 | see CVE |
CVE-2023-41064 KEV | 8.5 | 7.8 | 0.8990 | 2023-09-07 | see CVE |
CVE-2023-44487 KEV | 8.5 | 7.5 | 1.0000 | 2023-10-10 | see CVE |
CVE-2023-0669 KEV | 8.1 | 7.2 | 1.0000 | 2023-02-06 | see CVE |
CVE-2023-20273 KEV | 8.1 | 7.2 | 0.9265 | 2023-10-25 | see CVE |
CVE-2023-35081 KEV | 8.1 | 7.2 | 0.9283 | 2023-08-03 | see CVE |
CVE-2020-1472 KEV | 7.5 | 5.5 | 0.9951 | 2020-08-17 | see CVE |
CVE-2023-36844 KEV | 7.5 | 5.3 | 0.9430 | 2023-08-17 | see CVE |
CVE-2023-36846 KEV | 7.5 | 5.3 | 0.9510 | 2023-08-17 | see CVE |
CVE-2023-36847 KEV | 7.5 | 5.3 | 0.9412 | 2023-08-17 | see CVE |
CVE-2023-4967 | 6.5 | 8.2 | 0.0109 | 2023-10-27 | see CVE |
CVE-2023-3466 | 6.4 | 8.3 | 0.0304 | 2023-07-19 | see CVE |
CVE-2023-3467 | 6.4 | 8.0 | 0.0210 | 2023-07-19 | see CVE |
No techniques attributed.
Co-occurring actors
- AnonOps 50 shared CVEs
- COMP-APPLE-MASIMO 50 shared CVEs
- COMP-MICROSOFT-SALESFORCE 50 shared CVEs
- COMP-GOOGLE-CIVIL-DEFENDANT 24 shared CVEs
- l group 17 shared CVEs
- COMP-CROWDSTRIKE-MCAFEE 13 shared CVEs
- COMP-SENTINELONE-CYLANCE 12 shared CVEs
- COMP-AMAZON-WALMART-LOGISTICS 11 shared CVEs
- Maui ransomware 10 shared CVEs
- Storm-0530 10 shared CVEs
Similar actors
Overlapping CVEs
- COMP-APPLE-MASIMO 0.88
- COMP-MICROSOFT-SALESFORCE 0.20
- COMP-GOOGLE-CIVIL-DEFENDANT 0.19
- AnonOps 0.18
- COMP-SENTINELONE-CYLANCE 0.17
Active in same years
Same category
- LAPSUS$ 1.00
- Akira 1.00
- INC Ransom 1.00
- Play 1.00
- BlackByte 1.00