Doppelpaymer

Reported Context (4)

Researchers at Infoblox said SocGholish has served as an entry point for this ransomware group. International Operation Disrupts SocGholish Botnet Linked to Evil Corp
The ransomware operation claimed to have hit Foxconn’s CTBG MX facility in December 2020 and allegedly stole data, encrypted servers, and destroyed backup data; it reportedly demanded a $34 million ransom. Foxconn confirms cyberattack on North American factories as Nitrogen claims data theft
The article reports that DoppelPaymer attacked a Foxconn facility in Mexico in December 2020 and demanded 1,804 bitcoin. Nitrogen Claims Foxconn Data Theft; Company Confirms Factory Cyberattacks
Ransomware-as-a-service gang associated with attacks in Europe; DarkOwl said there was insufficient evidence to confirm AvosLocker was its new brand. AvosLocker Launches Tor Services for Victim Communications and Press Releases

Malware (7)

People (3)

Threat Actors (9)

MITRE ATT&CK (1)

Vendors (1)

Products (1)

Industries (7)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.