Phobos Ransomware의 VX-underground Malware Collective

πŸ’Œ λ³΄μ•ˆ μ†Œμ‹
1

Phobos Ransomware의 VX-underground Malware Collective

Phobos λžœμ„¬μ›¨μ–΄ λ³€ν˜•μ€ 2018λ…„ Crysis Ransomware μ œν’ˆκ΅°μ—μ„œ νŒŒμƒλ˜μ—ˆκ³ , μΈκΈ°μžˆλŠ” VX-underground 맬웨어 곡유 집단을 ν”„λ ˆμž„ν•˜μ—¬ 그룹이 μ•”ν˜Έν™”λ₯Ό μ‚¬μš©ν•œ 곡격 뒀에 μžˆμŒμ„ λ‚˜νƒ€λƒ…λ‹ˆλ‹€. μœ„ν˜‘ ν–‰μœ„μž 그룹은 λžœμ„¬μ›¨μ–΄μ˜ κ°œλ°œμ„ κ΄€λ¦¬ν•˜κ³  λ§ˆμŠ€ν„° μ•”ν˜Έ 해독 ν‚€λ₯Ό μœ μ§€ν•˜λŠ” 반면, λ‹€λ₯Έ μœ„ν˜‘ ν–‰μœ„μžλŠ” λ„€νŠΈμ›Œν¬λ₯Ό μœ„λ°˜ν•˜κ³  μž₯치λ₯Ό μ•”ν˜Έν™”ν•˜κΈ° μœ„ν•œ μ œνœ΄μ‚¬ μ—­ν• μ„ν•©λ‹ˆλ‹€. 2023λ…„ ID λžœμ„¬μ›¨μ–΄ μ„œλΉ„μŠ€λ₯Ό 톡해 PhobosλŠ” 4%의 μ œμΆœλ¬Όμ„ μ°¨μ§€ν•˜κ³  μžˆμŠ΅λ‹ˆλ‹€. κ·ΈλŸ¬λ‚˜ 아직 큰 곡격을 μˆ˜ν–‰ν•˜κ³  수백만 λ‹¬λŸ¬λ₯Ό μš”κ΅¬ν•˜λŠ” "μ—˜λ¦¬νŠΈ"μž‘μ „μœΌλ‘œ μ§„ν™”ν•˜μ§€ μ•Šμ•˜μŠ΅λ‹ˆλ‹€.

Phobos λžœμ„¬μ›¨μ–΄λŠ” 2018λ…„ Crysis Ransomware μ œν’ˆκ΅°μ—μ„œ νŒŒμƒλ˜μ—ˆκ³ , μΈκΈ°μžˆλŠ” VX-underground 맬웨어 곡유 집단을 ν”„λ ˆμž„ν•˜μ—¬ 그룹이 μ•”ν˜Έν™”λ₯Ό μ‚¬μš©ν•œ 곡격 뒀에 μžˆμŒμ„ λ‚˜νƒ€λƒ…λ‹ˆλ‹€. μœ„ν˜‘ ν–‰μœ„μž 그룹은 λžœμ„¬μ›¨μ–΄μ˜ 개발과 λ§ˆμŠ€ν„° μ•”ν˜Έ 해독 ν‚€λ₯Ό μœ μ§€ν•˜λŠ” 반면, λ‹€λ₯Έ μœ„ν˜‘ ν–‰μœ„μžλŠ” λ„€νŠΈμ›Œν¬λ₯Ό μœ„λ°˜ν•˜κ³  μž₯치λ₯Ό μ•”ν˜Έν™”ν•˜κΈ° μœ„ν•œ μ œνœ΄μ‚¬ μ—­ν• μ„ν•©λ‹ˆλ‹€. 2023λ…„ ID λžœμ„¬μ›¨μ–΄ μ„œλΉ„μŠ€λ₯Ό 톡해 PhobosλŠ” 4%의 μ œμΆœλ¬Όμ„ μ°¨μ§€ν•˜κ³ 

VX-Underground malware collective framed by Phobos ransomware

The PHOBOS ransomware transformation was derived from the Crysis Ransomware product line in 2018 and indicates that the group is after the group’s encryption attack by frame of a popular VX-UNDERGROUND malware sharing group.The threat actor group manages the development of ransomware and maintains a master password detoxification, while other threats act as affiliates for violating the network and encrypting the device.In 2023, through ID ransomware service, Phobos occupies 4%of submissions.But it hasn’t evolved into an β€œelite” operation that still has a big attack and requires millions of dollars.

The Phobos ransomware was derived from the 2018 Crysis Ransomware product and indicates that the group is after the group’s encryption attack by frame of the popular VX-HONDERGROUND malware sharing group.The threat actor group maintains ransomware development and master cryptocurrency, while other threats act as affiliates for violating the network and encrypting the device.In 2023, through ID ransomware service, Phobos occupies 4%submissions

https://www.bleepingcomputer.com/news/security/vx-underground-malware-collective-framed-by-phobos-ransomware/