Threat Landscape Dashboard

Assessing today's threats and the relationships between them

Avaddo - Ransomware

The Avaddon Ransomware-as-a-Service (RaaS) program was discovered being advertised on underground forums in mid-2020. Affiliates are required to follow a set of rules including not distributing the address of the admin panel to third parties and targeting users in the Commonwealth of Independent States (CIS). The malware is distributed through email spam campaigns containing a JavaScript downloader disguised as a JPG photo. Various techniques are used for execution and persistence including PowerShell, BITS jobs, scripting, and WMI.
Name Modified Date Sources
Avaddo - Ransomware 2020-06-19