Uptime Hamster: 108d 4h 23mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza Nitro

Nitro

0 incidentes 0 paises 0 sectores apt CN Ultimo: -
Aliases: Covert Grove, vinculado al dominio malpedia, es recomendable para mitigar riesgos potenciales, este actor ha sido identificado en fuentes de inteligencia
Ver en IntelTracker → APTTrail →
Nitro is a ransomware group known for targeting various industries globally, first emerging as early as April 2011 with initial activities focused on industrial espionage against chemical companies. This group, assessed with high confidence to be of Chinese origin, later evolved into a financially motivated ransomware operation, characterized by its rapidly evolving tactics and the employment of double extortion where sensitive data is exfiltrated before encryption and threatened for public release. While initially associated with the 'Nitro Attacks' using tools like Poison Ivy, the group later shifted to ransomware, distinguishing itself by adapting its methodologies over time.

Aliases del actor

Covert Grovevinculado al dominio malpediaes recomendable para mitigar riesgos potencialeseste actor ha sido identificado en fuentes de inteligencia

Actores similares

nitrogenthreat-actor · 12shinyhuntersthreat-actor · 87krybitthreat-actor · 78genesisthreat-actor · 74other-actorsactor · 72payoutskingthreat-actor · 64anubisthreat-actor · 53pearthreat-actor · 51unknown---unmapped-actorsactor · 42chaosthreat-actor · 41

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownransomware.anggipradana.comRansomware Group: nitrogen
Motivacion
Information theft and espionage
Tecnicas MITRE
T1137, T1569, T1083, T1547, T1218 - Signed Binary Proxy Execution, T1583
CVEs relacionadas
CVE-2023-38831, CVE-2023-36884, CVE-2022-47966, CVE-2022-42475, CVE-2022-21893, CVE-2021-34824
Tipo
apt
Pais origen
CN
Motivacion
Information theft and espionage
Impacto
109
Actualizado
Wed, 01 Ju

Paises objetivo (OSINT)

ArgentinaBangladeshCanadaChinaGermanyFinlandFranceHong KongIndiaJapan

Sectores objetivo (OSINT)

Chemical&Pharmaceutical ManufacturingElectrical&Electronical ManufacturingAutomotiveInformation ServicesProfessional&Technical ServicesHealthCare & Social AssistancePublic AdministrationOil & GasSoftware PublishersInternet Publishing