#ParsedReport #CompletenessLow
22-09-2026

From Payment Plan to Ransomware - Inside a Global Group Attack

https://cofense.com/blog/from-payment-plan-to-ransomware-inside-a-global-group-attack

Report completeness: Low

Actors/Campaigns:
Global (motivation: financially_motivated, cyber_criminal)

Threats:
Black_lock
Mamona

Victims:
Large scale enterprises, All industries

ChatGPT TTPs:
do not use without manual check
T1036, T1071.001, T1078, T1105, T1135, T1204.001, T1486, T1491.001, T1562.001, T1566.001, have more...

IOCs:
Url: 5
File: 4
IP: 3
Hash: 5

Algorithms:
sha256, md5

Platforms:
x86