Rewterz

Rewterz Threat Alert – CaddyWipper Ransomware – Active IOCs

April 6, 2022
Rewterz

Rewterz Threat Alert – New Android Malware – Active IOCs

April 6, 2022

Rewterz Threat Alert – FarAttack Ransomware – Active IOCs

Severity

Medium

Analysis Summary

Farattack Ransomware is newly discovered ransomware that is quickly gaining momentum. Ransomware of this type encrypts all user’s data on the computer and changes their extensions to “.farattack.” Farattack ransomware encrypts the victim’s file and provides instructions on how to retrieve them using said instructions.

Impact

  • File Encryption
  • Data Exfiltration
  • Credential Theft
  • Financial Loss

Indicators of Compromise

MD5

  • 1c021f42e3a138060e1d298726d1579f

SHA-256

  • 9c73dc281f90a01ff3c8013c297a76319b77f24360de3ee1623a4356126d796c

SHA1

  • 54e3384fb68fde6fc711491e8072781e3910156a

Remediation

  • Block all threat indicators at your respective controls.
  • Search for IOCs in your environment.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.