GINC-APT-0861 · Criminal

Nullbulge

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0861 · nullbulge

What it is

NullBulge is a cybercriminal threat group targeting AI and gaming focused entities. They weaponize code in publicly available repositories to distribute malware, including LockBit ransomware. The group claims to be motivated by a pro-art, anti-AI cause, but their activities indicate a financial focus. NullBulge uses obfuscated code in public repositories and malicious mods to target their victims.

Tools

The tools and malware families the sources tie to it.

  • Cyber Eye RAT
  • CyberGate

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de