Grief

Description

(Zscaler) An early Grief ransomware (aka Pay or Grief) sample was compiled on May 17, 2021. This sample is particularly interesting because it contains the Grief ransomware code and ransom note, but the link in the ransom note points to the DoppelPaymer ransom portal. This suggests that the malware author may have still been in the process of developing the Grief ransom portal. Ransomware threat groups often rebrand the name of the malware as a diversion.

Names

Name
Grief
Pay or Grief

Category

Malware

Type

• Ransomware
• Big Game Hunting

Information

• https://www.zscaler.com/blogs/security-research/doppelpaymer-continues-cause-grief-through-rebranding
• https://redcanary.com/blog/grief-ransomware/
• https://socradar.io/dark-web-threat-profile-grief-ransomware-group/

Other Information

Uuid

aa2dfc3d-ed20-4970-9624-ea19b096a395

Last Card Change

2021-12-26