Category Archives: Iron group

A prolific cybercrime group known as Iron Group is actively developing a new family of destructive malware that pretends to ask for ransom, but in fact steals and deletes victims’ data as it self-propagates itself on a quest for the next target. Iron, also known as Rocke, is a Chinese-speaking hacking group that has grown in notoriety this year for its use of cryptojacking malware that leverages a backdoor from HackingTeam’s leaked code. Researchers from numerous cybersecurity firms have pointed to Iron as a threat that has to be followed because they’re continuously updating and adding new featuring to malware that’s regularly exploring new attack vectors. Palo Alto Networks researchers announced a new finding on Monday: Iron developed a new malware family, Xbash, that self-propagates and appears to destroy a victim’s data. Ransomware and cryptojacking, Iron’s previous methods of attack, are much more obvious ways to regular profits. It’s not […]

The post Chinese-speaking cybercrime group launches destructive malware family appeared first on Cyberscoop.

Continue reading Chinese-speaking cybercrime group launches destructive malware family→