Threat report

news.sophos.com/en-us/2021/08/09/blackmatter-ransomware-emerges-from-the-shadow-of-darkside

https://news.sophos.com/en-us/2021/08/09/blackmatter-ransomware-emerges-from-the-shadow-of-darkside/

Published on: news.sophos.com

ATT&CK techniques those detections carry

T1490Inhibit System Recovery
T1552.002Credentials in Registry
T1087.002Domain Account

5 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
SchCache Change By App Connect And Create ADSI Object	Informational	Splunk security content	Aug 26, 2026	Apache License 2.0
Change To Safe Mode With Network Config	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Bcdedit Command Back To Normal Mode Boot	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Auto Admin Logon Registry Entry	Medium	Splunk security content	Aug 26, 2026	Apache License 2.0
Add DefaultUser And Password In Registry	Informational	Splunk security content	Aug 26, 2026	Apache License 2.0

Showing 5 of 5

Filter in the catalogue