TF-MAL-elf.acidpour
📛 Threat Title
Malware family: AcidPour
Description
ThreatFox malware family `elf.acidpour`. Printable name: AcidPour.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
elf.acidpour
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.acidpour
IOC database
- Type
- domain
- Value
elf.acidpour- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-elf.acidpour
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.acidpour
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:arstechnica.com
Never-before-seen data wiper may have been used by Russia against Ukraine AcidRain, discovered in 2022, is tied to AcidPour . Both are attributed to Russia.
-
web:attack.mitre.org
AcidPour is a variant of AcidRain designed to impact a wider range of x86 architecture Linux devices. AcidPour is an x86 ELF binary that expands on the targeted devices and locations in AcidRain by including items such as Unsorted Block Image (UBI), Deice Mapper (DM), and various flash memory references.
-
web:blog.netmanageit.com
SentinelLabs discovered a new Linux wiper named AcidPour , a variant of AcidRain used in attacks against Ukraine. AcidPour expands on AcidRain's capabilities to better target Linux devices like networking gear, IoT, RAIDs, and possibly ICS.
-
web:cirt.gy
Remediation To mitigate the risk posed by AcidPour and similar data wiping malware , organizations and individuals are advised to implement robust cybersecurity measures. This includes keeping systems and software up to date with the latest security patches, implementing strong access controls, and regularly backing up critical data to secure, offsite locations. Additionally, organizations ...
-
web:cyberpress.org
A recent cyberattack in Ukraine used wiper malware , AcidRain, and a variant, AcidPour , to target critical infrastructure, erase data, and disrupt operations, highlighting their growing role in cyber warfare as researchers at SentinelOne and Ruben Santamarta confirmed the attacks' impact. The AcidRain wiper attack coincided with the Russo-Ukrainian conflict and targeted Viasat KA-SAT modems ...
-
web:ebs.publicnow.com
In recent years, several destructive malware variants have emerged in the wild, often used in geopolitical attacks to cripple compromised hosts or network systems. In March 2024, SentinelOne discovered a new variant of the AcidRain wiper malware , featuring updated capabilities and attack vectors. This variant, named AcidPour , was designed to irreversibly delete data from targeted systems ...
-
web:www.acidpour.com
AcidPour is a destructive Linux-based wiper malware believed to be a more capable variant of AcidRain. It targets x86 devices including modems, routers, and potentially industrial control systems (ICS).
-
web:www.globalsecuritymag.com
SentinelLabs' analysis is ongoing. Key findings: • SentinelLabs has discovered a novel malware variant of AcidRain, a wiper that rendered Eutelsat KA-SAT modems inoperative in Ukraine and caused additional disruptions throughout Europe at the onset of the Russian invasion.
-
web:www.sentinelone.com
Executive Summary SentinelLABS has discovered a novel malware variant of AcidRain, a wiper that rendered Eutelsat KA-SAT modems inoperative in Ukraine and caused additional disruptions throughout Europe at the onset of the Russian invasion. The new malware , which we call AcidPour , expands upon AcidRain's capabilities and destructive potential to now include Linux Unsorted Block Image (UBI ...
-
web:www.splunk.com
The Splunk Threat Research Team provides an analysis of AcidPour and how to use Splunk's out-of-the-box security content to help defend against this wiper malware .
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.