Record · corpus.blog/posts/01a0f9c8-1b5a-7229-8dfd-6c0b0baaa392

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

thedfirreport.com · published 8 September 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at thedfirreport.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 24
Words captured: 6,187

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.security.com/threat-intelligence/play-ransomware-volume-shadow-copy

security.com

https://www.trendmicro.com/vinfo/us/security/news/ransomware-spotlight/ransomware-spotlight-play

trendmicro.com

https://www.broadcom.com/support/security-center/protection-bulletin/custom-betruger-backdoor-deployed-by-ransomhub-affiliate

broadcom.com

https://www.group-ib.com/blog/dragonforce-ransomware/

group-ib.com

https://x.com/r3nzsec

x.com

https://x.com/EncapsulateJ

x.com

https://x.com/rkonicekr

x.com

https://www.linkedin.com/in/adam-rowe1

linkedin.com

https://www.desksoft.com/EarthTime.htm

desksoft.com

https://certcentral.org/lookup?detail_type=signer&query=Brave+Pragmatic+Network+Technology+Co.%2C+Ltd.

certcentral.org

https://www.virustotal.com/gui/file/bcff246f0739ed98f8aa615d256e7e00bc1cb24c8cabaea609b25c3f050c7805/detection

virustotal.com

MSIX installer malware delivery on the rise across multiple campaigns Read at the source ↗

redcanary.com

https://github.com/Bert-JanP/Hunting-Queries-Detection-Rules/blob/main/Defender%20For%20Endpoint/ttp_t1127-001_suspNetworkConnMSBuild.md

github.com

Intelligence Insights: April 2025 Read at the source ↗

redcanary.com

https://x.com/banthisguy9349/status/1822635735494664701

x.com

https://russianpanda.com/The-Abuse-of-ITarian-RMM-by-Dolphin-Loader

russianpanda.com

https://www.virustotal.com/gui/file/6f9326224e6047458e692cd27aeb1054b9381c67aaf2fe238dbebfbc916c4b33/detection

virustotal.com

https://www.virustotal.com/gui/file/ae7c31d4547dd293ba3fd3982b715c65d731ee07a9c1cc402234d8705c01dfca/detection

virustotal.com

https://www.security.com/threat-intelligence/ransomhub-betruger-backdoor

security.com

https://fieldeffect.com/blog/grixba-play-ransomware-impersonates-sentinelone

fieldeffect.com

https://github.com/fortra/impacket/blob/master/examples/wmiexec.py

github.com

https://detection.fyi/

detection.fyi

https://sigmasearchengine.com/

sigmasearchengine.com

https://cwe.mitre.org/data/definitions/427.html

cwe.mitre.org

Elsewhere on thedfirreport.com (80)

https://thedfirreport.com/services/threat-intelligence/

thedfirreport.com

https://thedfirreport.com/contact/

thedfirreport.com

https://thedfirreport.com/services/detection-rules/

thedfirreport.com

https://thedfirreport.com/services/dfir-labs/

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_001.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_002-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_003.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_004.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_005-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_006-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_007.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_008.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_073.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_009.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_010.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_011.png

thedfirreport.com

https://thedfirreport.com/2025/03/31/fake-zoom-ends-in-blacksuit-ransomware/

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_012.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_013.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_014.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_015.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_016-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_017-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_018-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_019.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_020.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_021.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_022.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_023-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_024-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_025-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_026.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_027.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_028.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_029.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_030-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_031.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_032.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_033.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_034-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_035.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_036.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_037.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_038.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_039.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_040.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_041.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_042.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_043.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_044.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_045.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_046.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_047.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_048-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_049-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_050.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_051.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_052_01.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_053-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_054.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_055.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_056_01.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_057.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_058.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_059.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_060.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_061.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_062.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_063-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_064-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_065.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_066-scaled.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_067.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_068.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_069.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_070_01.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_071.png

thedfirreport.com

https://thedfirreport.com/wp-content/uploads/2025/09/32034_072_01.png

thedfirreport.com

https://thedfirreport.com/2025/02/24/confluence-exploit-leads-to-lockbit-ransomware

thedfirreport.com

https://thedfirreport.com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours

thedfirreport.com