A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field. According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit. Source: [enlace omitido]
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
apt73 ransomware
*/
rule apt73_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.apt73"
description = "Detects apt73 ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "apt73" ascii nocase
$name2 = "APT73" ascii
$onion = "apt73.onion" ascii nocase
condition:
any of them
}
metrabyte.cloud is the website of Metrabyte Cloud Co., Ltd., a cloud service provider from Thaila...
dgcement.com — this is the website of D.G. Khan Cement Company Limited (DG Cement), a major cem...
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| metrabyte.cloud | DE | Technology | — | 24 jul 2026 |
| dgcement.com | DZ | Manufacturing | — | 6 jul 2026 |
| azarestan.com | IR | Not Found | — | 6 jul 2026 |
| vicentetrapani.com | AR | Professional Services | — | 6 jul 2026 |
| westernint.com | US | Business Services | — | 6 jul 2026 |
| aydeniz.com | TR | Not Found | — | 3 jul 2026 |
| flazio.com | BR | Technology | — | 2 jul 2026 |
| holidaypalace.com | MO | Hospitality and Tourism | — | 2 jul 2026 |
| ritavo.com | AT | Not Found | — | 2 jul 2026 |
| kliknklik.com | ID | Consumer Services | — | 23 jun 2026 |
| gov.br | BR | Government & Defense | — | 23 jun 2026 |
| viennaairport.com | AT | Transportation/Logistics | — | 23 jun 2026 |
| smarty.arpinet.am | AM | Technology | — | 3 jun 2026 |
| elections.mia.gov.am from WOLVES OF TURAN | AM | Public Sector | — | 2 jun 2026 |
| minsa.com.mx | MX | Healthcare | — | 22 may 2026 |
| grupopetersen.com.ar | AR | Agriculture and Food Production | — | 21 may 2026 |
| protectasecurity.pe | PE | Professional Services | — | 27 abr 2026 |
| sella.eng.br | BR | Technology | — | 27 abr 2026 |
| siapenet.gov.br | BR | Government & Defense | — | 27 abr 2026 |
| minerasancristobal.com | MX | Energy & Utilities | — | 27 abr 2026 |
| corahperu.org | PE | Government & Defense | — | 27 abr 2026 |
| seit.cl | CL | Technology | — | 27 abr 2026 |
| asunim.co | CO | Energy & Utilities | — | 27 abr 2026 |
| cofaco.com | CO | Agriculture and Food Production | — | 27 abr 2026 |
| grupo-principal.com | MX | Professional Services | — | 27 abr 2026 |
| coel.com.mx | MX | Technology | — | 3 feb 2025 |
| n4telecom.com.br | BR | Professional Services | — | 23 dic 2024 |
| www.minerasancristobal.com | BO | Energy & Utilities | — | 11 dic 2024 |
| melhorcompraclube.com.br | BR | Professional Services | — | 9 dic 2024 |
| www.siapenet.gov.br | BR | Government & Defense | — | 3 dic 2024 |
| www.sella.eng.br | BR | Professional Services | — | 26 nov 2024 |
| www.protectasecurity.pe | PE | Professional Services | — | 23 nov 2024 |
| emefarmario.com.br | BR | Agriculture and Food Production | — | 9 nov 2024 |
| www.botiga.com.uy | UY | Professional Services | — | 8 nov 2024 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
azarestan.com (Azarestan Business Development Group) is a holding company based in Iran. Azaresta...
vicentetrapani.com — this is the website of Vicente Trapani S.A., an agro-industrial holding co...
Western International Group is a large private conglomerate based in Dubai that operates in the r...
Aydeniz Group is a family-owned group of companies founded in 1975, operating in several key indu...