Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 02:51:15 UTC
Description(Cybereason) The ransomware iterates through all folders on the machine, encrypts all files, and drops
a ransom note in each folder. Once it has finished encryption, it changes the desktop wallpaper to help inform the
user of the attack.
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=abd10b51-212f-4403-a7df-328238d3df19
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=abd10b51-212f-4403-a7df-328238d3df19
Page 1 of 1