StealTENGU

Reported Context (1)

Its activity spanned multiple regions and relied on Tor-based leak infrastructure, intermittent encryption, and tools such as StealTENGU, StealTG, and NetExec to steal data, disable defenses, and pressure victims to pay. SOCRadar Profiles Tengu Ransomware’s Attack Chain and Shisa Rebrand

CVE (1)

Malware (3)

Threat Actors (2)

MITRE ATT&CK (15)

Products (3)

Tools (5)

Industries (7)

Countries (11)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.