⌁ CyberSecurityBoardThreat Intel · CVEs · Products

Tag: malware

Attack Groups

Sodinokibi Ransomware Group Overview

Sodinokibi is the malware variant associated with the REvil ransomware group, used in attacks from April 2019 to July 2021. It is…

attack group malware Ransomware REvil
July 17, 2026
Malware

SugarLocker Ransomware Overview

SugarLocker is a ransomware variant developed by the Shtazi-IT dev shop, linked to the sanctioned Aleksandr Ermakov. It was sold with a…

malware Ransomware Shtazi-IT SugarLocker
July 17, 2026
Malware

ThumbcacheService: File Collection Tool

ThumbcacheService is a DLL used in conjunction with GoSerpent malware to collect sensitive files from compromised systems. It supplements the backdoor with…

file collection malware ThumbcacheService
July 17, 2026
Malware

Stowaway: Proxy and Remote Access Tool

Stowaway is a proxy and remote access tool with SOCKS5 proxying, port forwarding, reverse tunneling, remote shell access, file transfer, and SSH-based…

malware proxy RAT Stowaway
July 17, 2026
Malware

TmcLoader: C++ Loader Module

TmcLoader is a C++ loader module that contains an encrypted payload called TmcPayload. It was used in the GoSerpent campaign to exfiltrate…

loader malware TmcLoader
July 17, 2026
Malware

TmcPayload: Data Exfiltration Payload

TmcPayload is an encrypted payload deployed by TmcLoader to exfiltrate stored sensitive data from victim machines. It was part of the evolved…

exfiltration malware TmcPayload
July 17, 2026