Data Encrypted for Impact T1486
Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources. They can attempt to render stored data inaccessible by encrypting files or data on local and remote drives and withholding access to a decryption…
- Tactics
- Impact
- Actors using it
- 20
- Sub-techniques
- 0
Ransomware groups reported using it
N0nthegentlemenincransomakiraBrainCipherplayrhysidaeverestpayloadMajinahanashiOrovanightspiredragonforcesarcomaclop
Threat actors
- APT38North Korea · NICKEL GLADSTONE, BeagleBoyz, Bluenoroff · 70 techniques
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- Medusa Group52 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- BlackByteHecamede · 44 techniques
- Storm-050134 techniques
- FIN8Syssphinx · 31 techniques
- TeamPCPPCPCat, ShellForce, DeadCatx3 · 30 techniques
- Indrik SpiderRussia · Evil Corp, Manatee Tempest, DEV-0243 · 27 techniques
- Storm-181125 techniques
- INC RansomGOLD IONIC · 25 techniques
- TA505Hive0065, Spandex Tempest, CHIMBORAZO · 24 techniques
- Moonstone SleetNorth Korea · Storm-1789 · 23 techniques
- AkiraGOLD SAHARA, PUNK SPIDER, Howling Scorpius · 17 techniques
- The GentlemenStorm-2697, GOLD SHERWOOD · 13 techniques
- Water GaluraGOLD FEATHER · 3 techniques