Apt73
A new ransomware group is said to have emerged in mid-April 2024, under the name 'APT73.' It's worth noting that the group reportedly self-proclaimed as an APT, which stands for 'Advanced Persistent Threat' in the cybersecurity field.<br> <br> According to research, much of the available information about the aforementioned group came from another ransomware group known as LockBit.<BR>Source: https://github.com/crocodyli/ThreatActors-TTPs
Threat level
HIGH
Get an alert if one of your domains is named on a ransomware leak site.
Known infrastructure
The following Tor hidden services have been associated with this group:
qcgv5tfer4f46ns6ohh72zeyyh5uavoiybypzpt3lmwk5ecyqykptgqd.onionAPT73APT73APT73APT73
These sites are malicious. Open them only from an isolated environment.
Check if you’re affected
Look up your domain to see whether it appears on Apt73’s victim list.
risk score · threat categories · sources · age · confidence — in one request