- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Indonesia(high confidence)
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0799 · indohaxsec-team
IndonesiaWhat it is
INDOHAXSEC TEAM is an Indonesian group that claims to have developed a web-based version of WannaCry, asserting the ability to encrypt websites and demand Bitcoin as ransom. However, their technical capabilities remain uncertain, as creating ransomware of this scale requires significant expertise. The group's claims may be exaggerated for attention, and verified evidence is needed to assess their true capabilities.
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
- MISP Galaxy (CFR tagging)Indonesia
- ThreatActor.info (Malpedia et al.)Indonesia
Tools
The tools and malware families the sources tie to it.
- Xpert
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de