Pandora is a ransomware group that emerged in mid-February 2022, notably announcing its first victim on February 21, 2022. The group's primary motivation is financial gain, achieved through double extortion tactics where they exfiltrate sensitive data before encrypting systems and threatening to leak the information if ransom demands are not met. Pandora is widely suspected to be a rebrand of the Rook ransomware, itself a variant of Babuk, and has been associated with the Chinese-affiliated threat group BRONZE STARLIGHT. What distinguishes Pandora is its emphasis on efficient multithreading for rapid encryption and extensive anti-reverse engineering techniques to hinder analysis.

Aliases del actor

G0023ELMER backdoorGh0stHTRANUNICATPoison IvyPandoraasociados al grupoincluido Activistdominios como www

Actores similares

poison-ivyactor · 1backdoordiplomacyactor · 2capi-backdooractor · 1apt-poisonneedlesactor · 1BackdoorDiplomacyapt · 1spivyactor · 1poisonous-pandaactor · 1poison-carpactor · 1gh0st-ratactor · 1htranactor · 1

Paises afectados

URLs nuevas detectadas en IntelTracker