ransomware

quantum, adfind, cobaltstrike, icedid, ransomware, rclone, ShareFinder

Malicious ISO File Leads to Domain Wide Ransomware

April 3, 2023

adfind cobaltstrike ransomware

adfind, cobaltstrike, ransomware

Emotet Strikes Again - LNK File Leads to Domain Wide Ransomware

November 28, 2022

quantum adfind cobaltstrike

quantum, adfind, cobaltstrike, icedid, psexec, ransomware

Quantum Ransomware

April 25, 2022

adfind cobaltstrike conti

adfind, cobaltstrike, conti, exploit, icedid, ransomware

Stolen Images Campaign Ends in Conti Ransomware

April 4, 2022

adfind bazar cobaltstrike

adfind, bazar, cobaltstrike, diavol, ransomware

Diavol Ransomware

December 13, 2021

adfind bazar cobaltstrike

adfind, bazar, cobaltstrike, conti, ransomware

CONTInuing the Bazar Ransomware Story

November 29, 2021

exploit Fast Reverse Proxy PHOSPHORUS

exploit, Fast Reverse Proxy, PHOSPHORUS, Plink, ProxyShell, ransomware

Exchange Exploit Leads to Domain Wide Ransomware

November 15, 2021

mountlocker xinglocker adfind

mountlocker, xinglocker, adfind, cobaltstrike, icedid

IcedID to XingLocker Ransomware in 24 hours

October 18, 2021

adfind BazarCall cobaltstrike

adfind, BazarCall, cobaltstrike, conti, ransomware, trickbot

BazarCall to Conti Ransomware via Trickbot and Cobalt Strike

August 1, 2021

cobaltstrike conti icedid

cobaltstrike, conti, icedid, ransomware

Conti Ransomware

May 12, 2021

Access DFIR Labs Book a Demo

The DFIR Report provides in-depth, real-world intelligence based on observed intrusions, enabling security analysts and teams  to strengthen defenses, enhance detection,  and accelerate response.