SharpRhino Strikes: Hunters International Targets Network Admins with Angry IP Scanner Malware
Hunters International’s latest malware, SharpRhino, targets network admins via a fake Angry IP Scanner. Hidden in typo-squatted sites, it embeds itself to spread across networks, using Rust-based encryption to lock files. Quorum Cyber links the gang to Hive ransomware, suggesting a rebrand.
Hot Take:
Move over, Hive, there’s a new villain in town! Hunters International is out here turning networking tools into cyber booby traps. It’s like finding out your friendly neighborhood handyman is secretly a supervillain. Who knew network admin tools could be so… sharp?
Key Points:
- Hunters International is targeting network admins with malware disguised as Angry IP Scanner.
- The malware, named SharpRhino, is hidden on typo-squatted websites.
- SharpRhino uses a Rust-based encryptor and establishes persistence through registry alterations.
- The gang employs double extortion tactics, copying data before encrypting it and demanding ransom.
- Hunters International is suspected to be a rebrand of the notorious Hive ransomware gang.
Already a member? Log in here