- Category
- Tracked, unattributed · A vendor’s working cluster, not yet attributed.
- Origin
- Unknown
- Sources
- 4 sources carry it
- Identifier
- GINC-APT-0537 · hezb
What it is
Hezb is a group deploying cryptominers when new exploit are available for public facing vulnerabilities. The name is after the miner process they deploy.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Other names
- Mimo
Tools
The tools and malware families the sources tie to it.
- Miner-C
- Xploit
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de