Void RabisuVoid Rabisu

Also known as: Tropical Scorpius · Void Rabisu

Known aliases
2

Profile

Void Rabisu is a threat actor catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as Tropical Scorpius. Documented victim organisations include Ukraine, European Union. Original record: Void Rabisu is an intrusion set associated with both financially motivated ransomware attacks and targeted campaigns on Ukraine and countries supporting Ukraine.

Aliases· 2

Tropical ScorpiusVoid Rabisu

Known victims· 2

  • Ukraine
  • European Union

References

  1. https://www.trendmicro.com/en_us/research/23/j/void-rabisu-targets-female-leaders-with-new-romcom-variant.html
  2. https://www.trendmicro.com/en_za/research/23/e/void-rabisu-s-use-of-romcom-backdoor-shows-a-growing-shift-in-th.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
Void Blizzard
Actor
Void Manticore
Actor
Void Arachne
Actor
Void Banshee
Actor
Void Balaur
Actor
SHADOW-VOID-042
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.