GINC-APT-0577 · Criminal

ShadowSyndicate

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
4 sources carry it
Identifier
GINC-APT-0577 · shadowsyndicate

What it is

ShadowSyndicate is a threat actor associated with various ransomware groups, using a consistent Secure Shell fingerprint across multiple servers. They have been linked to ransomware families such as Quantum, Nokoyawa, and ALPHV. ShadowSyndicate's infrastructure overlaps with that of Cl0p, suggesting potential connections between the two groups. Their activities indicate they may be a Ransomware-as-a-Service affiliate.

Tools

The tools and malware families the sources tie to it.

  • CrossRat

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de