สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency

Report

Home > List all groups > List all tools > List all groups using tool RansomBoggs

Threat Group Cards: A Threat Actor Encyclopedia

Tool: RansomBoggs

Names	RansomBoggs
Category	Malware
Type	Ransomware
Description	(ESET) The ESET research team has spotted a new wave of ransomware attacks taking aim at multiple organizations in Ukraine and bearing the hallmarks of other campaigns previously unleashed by the Sandworm APT group. Even though the ransomware – called RansomBoggs by ESET and written in the .NET framework – is new, particularly the way it is deployed bears close resemblance to some past attacks attributed to the notorious threat actor.
Information	<https://www.welivesecurity.com/2022/11/28/ransomboggs-new-ransomware-ukraine/>

Last change to this tool card: 27 December 2022

Download this tool card in JSON format

Previous: Ranbyus
Next: RapidStealer

All groups using tool RansomBoggs

Changed	Name	Country	Observed
APT groups
	Sandworm Team, Iron Viking, Voodoo Bear		2009-Mar 2024

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Report incidents

+66 (0)2-123-1227

[email protected]