Skip to content
This repository was archived by the owner on Nov 16, 2023. It is now read-only.

ryuk related pages#234

Merged
lomayor merged 5 commits into
microsoft:masterfrom
martyav:ryuk
Sep 10, 2020
Merged

ryuk related pages#234
lomayor merged 5 commits into
microsoft:masterfrom
martyav:ryuk

Conversation

@martyav
Copy link
Copy Markdown
Contributor

@martyav martyav commented Sep 9, 2020

Part of a series of pull requests, placing queries from the TA reports in the repo.

Some of the column names may be outdated, as some of the reports are quite old.

Others in the series:
#145, #155, #163, #165,
#168, #169, #170, #172,
#173 , #174, #175, #177,
#178, #182, #183, #190,
#191, #192, #195, #196
#198, #202, #203, #204
#205, #206, #207, #208
#209, #214, #215, #218
#229, #230, #231, #233

@martyav martyav mentioned this pull request Sep 9, 2020

This query was originally published in the threat analytics report, *Ryuk ransomware*. There is also a related [blog](https://www.microsoft.com/security/blog/2020/03/05/human-operated-ransomware-attacks-a-preventable-disaster/).

[Ryuk](https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Ransom:Win32/Ryuk&threatId=-2147232689) is human-operated ransomware. Muck like [DoppelPaymer](https://www.microsoft.com/security/blog/2020/03/05/human-operated-ransomware-attacks-a-preventable-disaster/) ransomware, Ryuk is spread manually, often on networks that are already infected with Trickbot.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Much like*

@lomayor lomayor merged commit b8dcada into microsoft:master Sep 10, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants