GINC-APT-0941 · Tracked, unattributed

SingularityMD

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
3 sources carry it
Identifier
GINC-APT-0941 · singularitymd

What it is

SingularityMD is a threat actor group that has targeted educational institutions in the US. They gained unauthorized access to their networks by exploiting weak security practices, such as using students' dates of birth as passwords. SingularityMD demanded a ransom in cryptocurrency and threatened to leak stolen information if not paid. They have demonstrated a willingness to follow through on their threats and have already leaked some data.

Tools

The tools and malware families the sources tie to it.

  • Xploit

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de