Type
Campaign
Actors
DarkRadiation operator
Pub. date
June 21, 2022
Initial access
Unknown
Impact
RansomOp
Observed techniques
Database ransomwareDisk WipeRemotely execute commands or scripts on a VM Rootkit - LD_PRELOAD
Targeted technologies
Docker
References
https://www.trendmicro.com/en_us/research/21/f/bash-ransomware-darkradiation-targets-red-hat--and-debian-based-linux-distributions.htmlhttps://www.sentinelone.com/blog/darkradiation-abusing-bash-for-linux-and-docker-container-ransomware/
Status
Stub
Last edited
Jun 2, 2024 11:53 AM