Skip to content

[Intel]: https://blog.sygnia.co/revealing-emperor-dragonfly-a-chinese-ransomware-group #544

@timb-machine

Description

@timb-machine

Area

Malware reports

Parent threat

Initial Access, Discovery, Lateral Movement, Collection, Impact

Finding

https://blog.sygnia.co/revealing-emperor-dragonfly-a-chinese-ransomware-group

Industry reference

attack:T1486:Data Encrypted for Impact

Malware reference

Cheerscrypt
Night Sky

Actor reference

Emperor Dragonfly
Bronze Starlight

Component

Linux, VMware

Scenario

No response