The LARVA-15, also known as Wazawaka, is a prominent cybercriminal linked to ransomware groups such as Monti, Ragnar Locker, NoEscape, and LockBit RaaS. Using stolen initial access credentials, penetration testing tools, and various exploits, he infiltrates networks, gains full control, and proceeds to download and delete backups.
- The full report is available here.
79.124.58.194
79.124.59.178
79.124.56.186
5.255.102.171
150.136.158.174
81.17.29.165
85.217.170.87
https://temp.sh/gQBGh/AnyDesk.exe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