Threat video1:00
Vexy Ransomware Osiiminppal Leak Post: Detection & IOCs
Vexy Ransomware lists Osiiminppal and claims 100 MB exfiltrated from it. Its 9 detection rules, 16 IOCs and a free Splunk SPL rule cover the listing.
Read the full threat intel for Vexy Ransomware Osiiminppal Leak Post: Detection & IOCs →
Chapters
- 0:00The hookVexy claims about 100 MB taken.
- 0:04The storyOsiiminppal was posted on the leak site.
- 0:11Attack pathThe group claims victim data was exfiltrated.
- 0:27AttributionAttributed to Vexy Ransomware.
- 0:32Indicators of compromise6 indicators to hunt: 2 IPs and 4 domains.
- 0:38MITRE ATT&CK techniques5 ATT&CK techniques, from initial access to impact.
- 0:43Remediation3 steps now: Hunt for and block access to Vexy Ransomware group indicators.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Vexy claims about 100 MB taken.
0:05Osiiminppal was posted on the leak site.
0:07The claim is not independently verified.
0:11The group claims victim data was exfiltrated.
0:14Then the victim was posted on the leak site.
0:17Vexy threatened a full leak unless contact was made.
0:20Vendor reporting describes gradual sample releases.
0:27Attributed to Vexy Ransomware. Confidence: medium.
0:326 indicators to hunt: 2 IPs and 4 domains.
0:385 ATT&CK techniques, from initial access to impact.
0:433 steps now: Hunt for and block access to Vexy Ransomware group indicators.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.