#AnteFrigus - Twitter Hashtag

over 5 years ago

Named after Prometheus from the Greek myth, #Prometey is a #ransomware which shares many #code similarities with #AnteFrigus. It will #encrypt your #data and demand ransom for its return. Protect yourself by deploying our public #YARArules https://t.co/IbPcp3ag5F

0

3

5

0

GrujaRS @GrujaRS

over 6 years ago

#AnteFrigus #Ransomware extension .fcfceee! Ransom note;ATTENTION-fcfceee-README.txt Sample VT https://t.co/qhlNsBQh02

0

1

2

0

Adrian Hernandez @Sapphirex00

over 6 years ago

New #Prometey ransomware MD5s:da584e2f5775e8cc9b1c9d7606c50302, e13d54fba2854e50cfaeab7e9dbf94d7, e43f2c732577ea9f5474dbfaa423b17c. Very similar to #AnteFrigus ransomware features and code. Maybe a variant targeting #Korea. Did anyone see the initial downloader?

Sapphirex00's tweet photo. New #Prometey ransomware MD5s:da584e2f5775e8cc9b1c9d7606c50302, e13d54fba2854e50cfaeab7e9dbf94d7, e43f2c732577ea9f5474dbfaa423b17c. Very similar to #AnteFrigus ransomware features and code. Maybe a variant targeting #Korea. Did anyone see the initial downloader? https://t.co/qzDfwPshhU

3

2

1

0

GrujaRS @GrujaRS

over 6 years ago

#AnteFrigus #Ransomware extension .eaaeee! Ransom note;CLICK_HERE-eaaeee.txt Sample VT https://t.co/WQQr9YBr0l

0

5

2

0

Vitali Kremez @VK_Intel

almost 7 years ago

2020-01-31: 🆕#AnteFrigus #Ransomware| 🔥Improved Previous 🔦Previously Distributed via Exploit Kits as Test Payload ⛓️ 1⃣Improved Flow 2⃣Whitelist 3⃣Note PDB: C:\Users\Nikolas\...\encrypted-not-wall\...\encrypted-not-wall.pdb h/t @malwrhunterteam Ref ⏬ https://t.co/LnAx7gGY3s

$VK_Intel's tweet photo. 2020-01-31: 🆕#AnteFrigus #Ransomware| 🔥Improved Previous 🔦Previously Distributed via Exploit Kits as Test Payload ⛓️ 1⃣Improved Flow 2⃣Whitelist 3⃣Note PDB: C:\Users\Nikolas\...\encrypted-not-wall\...\encrypted-not-wall.pdb h/t @malwrhunterteam Ref ⏬ https://t.co/LnAx7gGY3s https://t.co/g3jvsHj2wU$

Vitali Kremez @VK_Intel

almost 7 years ago

2020-01-13:🆕 #AnteFrigus #Ransomware 💢 1⃣December 24, 2019 Build 2⃣URI param "add_outstuk&" (stats) 3⃣Implemented Process Killer Previously Distributed via Exploit Kits as Test Payload G:\sever\Scan\crypro\sse_simd.cpp MD5: c3171b5e33f5edab88846710170306f0 h/t @malwrhunterteam

$VK_Intel's tweet photo. 2020-01-13:🆕 #AnteFrigus #Ransomware 💢 1⃣December 24, 2019 Build 2⃣URI param "add_outstuk&" (stats) 3⃣Implemented Process Killer Previously Distributed via Exploit Kits as Test Payload G:\sever\Scan\crypro\sse_simd.cpp MD5: c3171b5e33f5edab88846710170306f0 h/t @malwrhunterteam https://t.co/pbxlRwZ45B$

1

33

31

4

0

28

16

1

0

Vitali Kremez @VK_Intel

almost 7 years ago

2020-01-13:🆕 #AnteFrigus #Ransomware 💢 1⃣December 24, 2019 Build 2⃣URI param "add_outstuk&" (stats) 3⃣Implemented Process Killer Previously Distributed via Exploit Kits as Test Payload G:\sever\Scan\crypro\sse_simd.cpp MD5: c3171b5e33f5edab88846710170306f0 h/t @malwrhunterteam

$VK_Intel's tweet photo. 2020-01-13:🆕 #AnteFrigus #Ransomware 💢 1⃣December 24, 2019 Build 2⃣URI param "add_outstuk&" (stats) 3⃣Implemented Process Killer Previously Distributed via Exploit Kits as Test Payload G:\sever\Scan\crypro\sse_simd.cpp MD5: c3171b5e33f5edab88846710170306f0 h/t @malwrhunterteam https://t.co/pbxlRwZ45B$

1

33

31

4

0

TrendAI™ Research

@trendai_RSRCH

almost 7 years ago

Atypical of ransomware variants, #AnteFrigus does not encrypt the C: drive of a victim’s computer and the files on unmapped network shares. Full details: https://t.co/702LBxqU8R https://t.co/ZRCOWskSx5

0

3

0

InfoSpyware @InfoSpyware

almost 7 years ago

#AnteFrigus, el nuevo ransomware que mata a tus pendrives https://t.co/uRTjDKSEzE (vía @InfoSpyware)

0

8

1

0

SonicWall @SonicWall

almost 7 years ago

The SonicWall Capture Labs Threat Research Team has issued a signature to protect against a new variant family of #AnteFrigus #ransomware spotted actively spreading in the wild. Learn more: https://t.co/vaMTvtvBbl #SonicAlert

SonicWall's tweet photo. The SonicWall Capture Labs Threat Research Team has issued a signature to protect against a new variant family of #AnteFrigus #ransomware spotted actively spreading in the wild. Learn more: https://t.co/vaMTvtvBbl #SonicAlert https://t.co/hd36Tv3uEd

0

2

1

0

SonicWall Technical Support @SonicWallTech

almost 7 years ago

The SonicWall Capture Labs Threat Research Team has issued a signature to protect against a new variant family of #AnteFrigus #ransomware spotted actively spreading in the wild. Learn more: https://t.co/NNQgMtxpox #SonicAlert