Cybercrime
DefrayX
Also known as Hive0091
0mentions, 7 days
0mentions, 30 days
nonelast mentioned
DefrayX is a threat actor group known for their RansomExx ransomware operations. They primarily target Linux operating systems, but also release versions for Windows. The group has been active since 2018 and has targeted various sectors, including healthcare and manufacturing. They have also developed other malware strains such as PyXie RAT, Vatet loader, and Defray ransomware.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
No posts or advisories have named this actor recently.
References
- https://securityaffairs.co/wordpress/138933/malware/ransomexx-ransomware-rust-language.html
- https://research.checkpoint.com/2022/28th-november-threat-intelligence-report/
- https://securityintelligence.com/posts/ransomexx-upgrades-rust/
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.