FiveHands Ransomware Seen to be Exploiting SonicWall--Similar to 'HelloKitty' Ransomware?

30 April 2021, 01:04 am
A strand of new ransomware is discovered to be deployed to attack SonicWall SMA 100 Series VPN appliances. The experts called it "FiveHands" which has a wide range of targets across Europe and North America.
According to the Mandiant security analysts, the group behind the attack is the UNC2447, which is an expert in starting data and network breaches in the system.
They also said that it is the group responsible for the deployment of "FiveHands" ransomware. It happened before the launch of the patches later in February.
Group's Operation Targets SonicWall
(Photo : Markus Spiske from Pexels)
UNC2447 is not new to certain exploitations of systems. Before they spread ransomware payloads, the group was spotted to be on the lookout for more deployments upon having full control of Cobalt Strike implants.

Related Keywords

United States , Minas Gerais , Acre , Brazil , America , Joseph Henry , Hellokitty Ransomware , Companhia Energ , Markus Spiske , Group Operation Targets Sonicwall , Tech Times , Hands Ransomware Seen , Exploiting Sonicwall Similar , Cobalt Strike , Hands Ransomware Has Resemblance , Bleeping Computer , Windows Restart Manager , Network Traffic , Ransomware , Ivehands , Sonicwall , ஒன்றுபட்டது மாநிலங்களில் , மினாஸ் கெரைச் , ஏக்கர் , பிரேசில் , அமெரிக்கா , ஜோசப் ஹென்றி , தொழில்நுட்பம் முறை , கோபால்ட் வேலைநிறுத்தம் , ஜன்னல்கள் மறுதொடக்கம் மேலாளர் , வலைப்பின்னல் போக்குவரத்து ,