LockerGoga

Malware & Tools · LockerGoga

· MalwareS0372 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

LockerGoga is ransomware that was first reported in January 2019, and has been tied to various attacks on European companies, including industrial and manufacturing firms.(Citation: Unit42 LockerGoga 2019)(Citation: CarbonBlack LockerGoga 2019)

Tactic Coverage

impact (3)defense impairment (2)stealth (1)lateral movement (1)

Used By (1 groups)

G0037FIN6Magecart Group 6, ITG08

Techniques (7)

T1070.004File Deletion

stealth

T1486Data Encrypted for Impact

impact

T1529System Shutdown/Reboot

impact

T1531Account Access Removal

impact

T1553.002Code Signing

defense impairment

T1570Lateral Tool Transfer

lateral movement

T1685Disable or Modify Tools

References

https://attack.mitre.org/software/S0372 https://www.carbonblack.com/2019/03/22/tau-threat-intelligence-notification-lockergoga-ransomware/https://unit42.paloaltonetworks.com/born-this-way-origins-of-lockergoga/