GINC-APT-0686 · Criminal

CRPxO

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0686 · crpxo

What it is

CRPxO is a ransomware group that has claimed responsibility for attacks on various organizations, including Encore Enterprises, Inc., KUVEYT TURK, and Johnson & Johnson, among others. The group has targeted entities across multiple countries, including the USA, Turkey, South Korea, Australia, the UK, and China. NCC Group has noted that the claims of responsibility from CRPxO have not been confirmed and highlighted inconsistent evidence regarding their involvement in these attacks.

Tools

The tools and malware families the sources tie to it.

  • China Chopper
  • CrossRat

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de