C0037 Water Curupira Pikabot Distribution
active2023-01-01 – 2023-12-01
also known asWater Curupira Pikabot Distribution
Pikabot was distributed in Water Curupira Pikabot Distribution throughout 2023 by an entity linked to BlackBasta ransomware deployment via email attachments. This activity followed the take-down of QakBot, with several technical overlaps and similarities with QakBot, indicating a possible connection. The identified activity led to the deployment of tools such as Cobalt Strike, while coinciding with campaigns delivering DarkGate and IcedID en route to ransomware deployment.
01
techniques used (10)
ATT&CK techniques this enables or maps to.
02
software used (3)
Malware and tools associated with this.
03
source
Where this definition is published.