top of page
Nefilim
Name
Category
Type
Targeted OS
Description
Information
Nefilim
Nephilim
Malware
Ransomware
Big Game Hunting
Not enough information
(Trend Micro) Nefilim is among the notable ransomware variants that use double extortion tactics in their campaigns. First discovered in March 2020, Nefilim threatens to release victims� stolen data to coerce them into paying the ransom. Aside from its use of this tactic, another notable characteristic of Nefilim is its similarity to {{Nemty}}; in fact, it is believed to be an evolved version of the older ransomware.
https://www.trendmicro.com/en_us/research/21/b/nefilim-ransomware.html
https://www.sisainfosec.com/blogs/nefilim-ransomware/
https://www.govinfosecurity.com/nephilim-ransomware-gang-tied-to-citrix-gateway-hacks-a-14480
https://labs.sentinelone.com/meet-nemty-successor-nefilim-nephilim-ransomware/
Malpedia
Alienvault OTX
Playbook
nil
CISA
Other Information
Mitre
Mitre Techniques
Mitre Techniques Navigator Link
NIL
['T1595', 'T1133', 'T1608', 'T1489', 'T1003', 'T1068', 'T1550', 'T1570', 'T1018', 'T1120', 'T1135', 'T1083', 'T1020', 'T1041', 'T1030', 'T1567', 'T1059', 'T1486']
bottom of page