Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
Knight ransomware (rebranded Cyclops)
*/
rule Knight_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.knight"
description = "Detects Knight ransomware ransom note"
date = "2026-05-04"
severity = 7
score = 70
strings:
$s1 = "knight_l" ascii nocase
$s2 = "How To Restore Your Files.txt" ascii nocase
$s3 = "Knight" ascii
$s4 = ".knight_l" ascii
condition:
2 of them
}
>> What happens? Your files are encrypted, without our help, it's irreversible. We got all of your confidential data, including business information.If we do not receive payment, we will leak the data(Including your competitors or law enforcement may get them on the web).Of course our disclosure will not reveal the complete document, some confidential information will appear in redacted form, which will not be recoverable on a computer.Everyone needs to be paid for their labor, and if you don't pay for it, your data can only be erased. >> How to contact with us? 1. Download and install TOR Browser ([redactado] you don't know how to use it, do a Google search!] 2. Open [redactado] 3. Contact us all the time, you may have something unexpected! >> What guarantees? As soon as you pay, you can get a comprehensive solution to this problem, and we provide you with a complete security audit solution to help you strengthen your security measures,and we will delete the data we get from you.Hopefully you can contact us soon for any information you'd like to know!We offer you a free test decryption in our webpage! >>> Warning! Recovery recommendations. We strongly recommend you to do not MODIFY or REPAIR your files, as this will damage them.
we have +100GB of confidential data, bank contracts, invoices, customer data, company invoices, company receipts.
We'll provide a sample of the data. [enlace omitido]/AbelSantosyAsociados/sampledata.rarOur activities cover the regulatory, technical, medical, marketing, building and administrative management aspects of companies dedicated to the manufacturing and/or marketing of pharmaceutical, cosmetic, dental, biomedical, mass consumption, household health products, diagnostic reagents, nutritional/ dietary, phytotherapeutic and food. Our areas of activity are under the responsibility of professionals with extensive national and international experience, developed in leading companies in the production and marketing of health products, who guarantee personalized attention, framed in excellence, reliability and confidentiality.1.png 74.46 KB2.png 75.2 KB3.png 136.72 KB4.png 460.44 KB5.png 70.5 KB
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| FEPCO Zona Franca SAS | CO | Business Services | — | 4 feb 2024 |
| AbelSantosyAsociados | AR | Financial Services | — | 2 feb 2024 |
| ABECOM LTDA | BR | Business Services | — | 29 ene 2024 |
| Agro Baggio LTDA | BR | Agriculture and Food Production | — | 7 ene 2024 |
| Contitec Empresarial | BR | Business Services | — | 30 nov 2023 |
| BMW Munique Motors | BR | Consumer Services | — | 31 oct 2023 |
| Pontifica Universidad Católica de Chile | CL | Education | — | 31 oct 2023 |
| Veneto Transportes | BR | Transportation/Logistics | — | 31 oct 2023 |
| Hospital Italiano de Buenos Aires | AR | Healthcare | — | 13 oct 2023 |
| GDL Logística Integrada S.A | BR | Transportation/Logistics | — | 3 oct 2023 |
| etsi.uy | UY | Not Found | — | 14 sept 2023 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
We have more than 170 GB of confidential ABECOM company files, contracts, finances, projects, customer and employee data, reports, sales and purchase documents, returns, freight, invoices, photos of employees' cars, photos of employees, vehicle checks, repair and warranty submissions, thermography, signatures, photos and videos.
Apparently, the DPO/LGPD rules that Agro Baggio holds so dear are not working properly. But this time you can't get away. Your servers are lying down and the network is tightly closed and unavailable. We got more than 70 GB in compressed form of important data Agro Boggio, John Deere and Costumers. Don't make mistakes and do the right thing. This time you won't get away with it. Time. Best regards. Don't forget that the DPO/LGPD fine is high.Further data leakage will be on your conscience. Your tongue is your enemy. Nothing personal, just business. Best regards. 1 word = 1 mistake = 1 file. Enjoy. end.png 361.26 KB20230601-1.png 446.84 KB20230601-transfer.png 433.02 KB
[enlace omitido] *250GB OF STOLEN DATA* Atuamos no mercado auxiliando empresas nas áreas contábil, fiscal, trabalhista e tributária. Por meio da dedicação e do comprometimento da nossa equipe, você dispõe de uma linha completa de serviços que facilitam a sua administração financeira.Conte com soluções seguras e tenha a contribuição certa para o crescimento do seu negócio.CONTITECRua Comandante Costa - 827 - Centro Norte - 78005-400 - Cuiaba - MT(65) [email protected]_5.png 73.38 KBpastas.png 131.13 KBpastas2.png 135.14 KB
[enlace omitido] à página oficial da Munique Motors. Sua concessionária autorizada BMW para todo Estado de Rondônia.Além da comercialização de carros novos e seminovos, revenda de peças e acessórios originais BMW, contamos com uma estrutura moderna para assistência técnica.A parceria com a BMW, é uma relação de confiança, compromisso e dedicação que é notória em todos os processos realizados, desde o atendimento até fechamento da venda e no pós-venda. O nosso objetivo é estar presente na vida de nossos clientes, como uma marca e uma concessionária de confiança. Sempre em busca pela melhoria contínua e a satisfação de nossos clientes.Com carros fascinantes para cada finalidade. Quer seja para uma viagem ou para uma aventura, aqui você vai encontrar o carro perfeito.BMW Munique MotorsEndereçoAvenida Governador Jorge Teixeira, 1473 , Porto Velho - RO, Brasil.post1.png 421.96 KBpost2.png 339.11 KBpost3.png 263.87 KBpost4.png 77.51 KBpost5.png 111.77 KB