FIN8 Strikes with Noberus Ransomware via Altered Sardonic Backdoor

Threat Advisories

FIN8 Strikes with Noberus Ransomware via Altered Sardonic Backdoor

Threat Level
Attack Report

For a detailed threat advisory, download the pdf file here

Summary

The financially motivated threat actor FIN8 has been detected employing a revised variant of the backdoor known as Sardonic to deliver the Noberus ransomware.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.