HOMETHREATSXiaoBa ransomware
APT / THREAT GROUP

XiaoBa ransomware

1
aliases

Intelligence Profile

XiaoBa ransomware — tracked by MISP Galaxy (ransomware).

Threat Analysis

XiaoBa ransomware is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://www.bleepingcomputer.com/news/security/xiaoba-ransomware-retooled-as-coinminer-but-manages-to-ruin-your-files-anyway/
→https://twitter.com/malwrhunterteam/status/923847744137154560
→https://twitter.com/struppigel/status/926748937477939200
→https://twitter.com/demonslay335/status/968552114787151873
→https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-8th-2018-crybrazil-cryptconsole-and-magniber/
→https://twitter.com/malwrhunterteam/status/1004048636530094081
→https://id-ransomware.blogspot.com/2017/10/xiaoba-ransomware.html

Quick Facts

TypeAPT / Threat Group
Aliases1

Also Known As

XiaoBa ransomware

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search XiaoBa ransomware
XiaoBa ransomware — APT / Threat Group | Threat Intelligence | CTIWATCH.COM