HOMETHREATSHDDCryptor
APT / THREAT GROUP

HDDCryptor

2
aliases

Intelligence Profile

Ransomware Uses https://diskcryptor.net for full disk encryption

Threat Analysis

HDDCryptor is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://www.linkedin.com/pulse/mamba-new-full-disk-encryption-ransomware-family-member-marinho
→blog.trendmicro.com/trendlabs-security-intelligence/bksod-by-ransomware-hddcryptor-uses-commercial-tools-to-encrypt-network-shares-and-lock-hdds/
→http://id-ransomware.blogspot.com/2016/09/hddcryptor-ransomware-mbr.html

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

HDDCryptorMamba

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search HDDCryptor
HDDCryptor — APT / Threat Group | Threat Intelligence | CTIWATCH.COM