MITRE ATT&CKsoftware (malware)
S0556 Pay2Key
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2021-01-04
Description
Pay2Key is a ransomware written in C++ that has been used by Fox Kitten since at least July 2020 including campaigns against Israeli companies. Pay2Key has been incorporated with a leak site to display stolen sensitive information to further pressure victims into payment.
Related
Uses · MITRE ATT&CK (8)
- T1573.002 Asymmetric Cryptography sub-technique
- T1090.001 Internal Proxy sub-technique
- T1070.004 File Deletion sub-technique
- T1489 Service Stop technique
- T1486 Data Encrypted for Impact technique
- T1016 System Network Configuration Discovery technique
- T1082 System Information Discovery technique
- T1095 Non-Application Layer Protocol technique
Referenced by MITRE ATT&CK · uses (1)
- G0117 Fox Kitten group
References
- https://www.clearskysec.com/fox-kitten/ ClearkSky Fox Kitten February 2020
- https://research.checkpoint.com/2020/ransomware-alert-pay2key/ Check Point Pay2Key November 2020