StrangerealIntel / EternalLiberty

186 stars 40 forks source link

Wizard Spider associated groups #1

Closed D3fD3c0y closed 2 years ago

D3fD3c0y commented 2 years ago

UNC1878/TEMP.MixMaster (FireEye) White Magician (PwC) FIN12 (Mandiant) ITG23 (IBM) Team9 (NCC Group)

StrangerealIntel commented 2 years ago

Wizard Spider aka GOLD BLACKBURN is Trickbot operators. Just FIN12 used the Trickbot botnet for drops RYUK ransomware.