Categories: News

New custom malware attack from the Russian hackers

Malware is the tool that a new ransomware group – OldGremlin, uses in its ransomware attacks. They target mainly large corporate networks and use self-made backdoors and file-encrypting malware.

Malware from Russia, against Russian companies?

Strangely, the group that has been active since March, targets mainly Russian companies. The new group seems to be very inventive. For instance, one member managed to trick a bank employee that he was a real journalist and also scheduled an interview. But, just before the interview, the group tricked the clerk to open a link that should have contained the interview questions. Instead, it delivered a Trojan. In fact, for the first and last phase of the attacks, the group uses self-made backdoors and also file-encrypting malware. The group then come with its own ransomware – “TinyCryptor” and own backdoors – “TinyPosh” and “TinyNode”. Then they use the Cobalt Strike penetration testing software, after they manage to make their way to the network.

This is how it started

The first malware attack that ended successfully happened in August and targeted a medical company. The hackers sent an email to an employee, with the title “Bill due”. He clicked on a link inside the message and downloaded an attached ZIP archive. Windows Defender detected and deleted the malware, but only after 20 seconds. This time was enough for the Trojan to affect the system. Three weeks after, all the employees were greeted with the message: “Your files have been enctrypted.” According to the Group-IB, in order to decrypt the files, the OldGremlin group asked for a ransomware of $50,000 dollars worth of cryptocurrency. Oleg Skulkin, from Group-IB, mentioned that the group violates “the unspoken rule about not working within Russia and post-Soviet countries.” So, Skulkin believes that the group can be classed as part of the Big Game Hunting, that “brings together ransomware operators targeting large corporate networks.”
Laurentiu Titei

Recent Posts

Best Data Encryption Software for Windows 11/10

Data encryption software for Windows is one of the safest ways to prevent hackers and…

3 hours ago

Best Antivirus Software for Windows 11/10 (Free and Paid)

While 2024 saw nearly 6.2 billion malware infections (mainly viruses), the number is projected to…

1 day ago

Best Online Virus Scanners for Windows Operating System

Did you know that roughly 17 million new malware (especially virus) infection instances are registered…

2 days ago

Top 13 Best Free Driver Updater Tools for Windows 10 and 11 in 2025

Are you on the lookout for the best free driver updater software? Look no further!…

2 days ago

CP2102 USB to UART Bridge Controller Driver Download and Install in Windows 10,11

The CP2102 driver is a connecting bridge between your computer and UART devices. It helps…

3 days ago

ASRock Drivers Download for Windows 11/10

While you are searching for how to download ASRock drivers and update them, we will…

3 days ago