New Zealand

clop

The ransomware group known as Cl0p is a variant of a previously known strain dubbed CryptoMix. It is worth noting that this variant was delivered as the final payload in a phishing campaign in 2019 and was exclusively financially motivated, with attacks carried out by the threat actors TA505.<br> <br> At that time, malicious actors sent phishing emails that led to a macro-enabled document that would drop a loader called 'Get2.' After gaining an initial foothold in the…

First seen 2020-03-13 · Last seen 2026-08-14 · 2 New Zealand claims

Tactics: Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Discovery, Lateral Movement, Collection, Exfiltration, Command and Control, Impact

CVEs named by the source: CVE-2021-27101, CVE-2021-27102, CVE-2021-27103, CVE-2021-27104, CVE-2024-55956, CVE-2025-61882, CVE-2023-34362, CVE-2023-27350, CVE-2023-27351, CVE-2026-4681, CVE-2021-35211, CVE-2025-11371

Cached from ransomware.live. 2026-10-01 PT. Leak sites are not linked.