Spacecolon Toolset Fuels Surge in Scarab Ransomware Attacks

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

CosmicBeetle, an active cyber threat group, has been utilizing a malicious toolset called Spacecolon in an ongoing campaign. This toolset is used to distribute variants of the Scarab ransomware by targeting vulnerable web servers and exploiting weaknesses in RDP credentials.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.