Wasabi

Reported Context (1)

Concurrently, the actor staged and executed Rclone to exfiltrate large volumes of sensitive data to Wasabi cloud storage before deploying additional TukTuk implants across critical infrastructure. EtherRAT and TukTuk C2 Lead to The Gentlemen Ransomware Deployment

CVE (1)

Malware (3)

People (3)

MITRE ATT&CK (19)

Vendors (5)

Products (9)

Tools (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.