Ransomware Group

NetWalker

Also known as: Mailto

Status: disrupted • First seen 2019-08400+ known victims

NetWalker attacked hospitals during COVID. They got shut down by international police.

Overview

NetWalker targeted healthcare during COVID before US/Bulgarian law enforcement takedown.

Target Industries

Healthcare, Education, Government

How They Attack

  • Phishing
  • Exploiting RDP
  • Credential stuffing

Notable Victims

University of California SF (2020)

Is your business exposed?

How to Protect Against NetWalker

  1. 1.

    Review IOCs from law enforcement advisories

MITRE ATT&CK Techniques

T1566, T1486, T1078

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required