Clop

Noticias

• ShinyHunters hacked Clop leak site using Grav CMS path traversal flawBleepingComputer · 25 sept 2026
• In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility ExposureSecurityWeek · 25 sept 2026
• ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims?Dark Reading · 21 sept 2026

Aparece junto a

• ShinyHunters 2

Técnicas MITRE ATT&CK

Acceso inicial

• T1078 Valid Accounts 82 reglas Sigma
• T1078.002 Domain Accounts 3 reglas Sigma
• T1133 External Remote Services 17 reglas Sigma
• T1190 Exploit Public-Facing Application 40 reglas Sigma
• T1566 Phishing 28 reglas Sigma
• T1566.001 Spearphishing Attachment 21 reglas Sigma
• T1566.002 Spearphishing Link 3 reglas Sigma

Ejecución

• T1059.003 Windows Command Shell 40 reglas Sigma
• T1106 Native API 12 reglas Sigma

Persistencia

• T1112 Modify Registry 40 reglas Sigma

Escalada de privilegios

• T1484.001 Group Policy Modification 6 reglas Sigma

Descubrimiento

• T1057 Process Discovery 3 reglas Sigma
• T1083 File and Directory Discovery 17 reglas Sigma
• T1135 Network Share Discovery 6 reglas Sigma
• T1497.003 Time Based Checks
• T1518.001 Security Software Discovery 5 reglas Sigma
• T1614.001 System Language Discovery 2 reglas Sigma

Movimiento lateral

• T1021.001 Remote Desktop Protocol 16 reglas Sigma

Recopilación

• T1119 Automated Collection 5 reglas Sigma

Mando y control

• T1105 Ingress Tool Transfer 40 reglas Sigma
• T1572 Protocol Tunneling 23 reglas Sigma

Impacto

• T1486 Data Encrypted for Impact 14 reglas Sigma
• T1489 Service Stop 13 reglas Sigma
• T1490 Inhibit System Recovery 26 reglas Sigma

Stealth

• T1027.002 Software Packing
• T1070.001 Clear Windows Event Logs
• T1140 Deobfuscate/Decode Files or Information 17 reglas Sigma
• T1218.007 Msiexec 9 reglas Sigma
• T1562.001 Disable or Modify Tools

Defense impairment

• T1553.002 Code Signing 1 reglas Sigma
• T1685 Disable or Modify Tools 81 reglas Sigma