Introduction
CRPxO is a ransomware group that has claimed responsibility for attacks on various organizations, including Encore Enterprises, Inc., KUVEYT TURK, and Johnson & Johnson, among others. The group has targeted entities across multiple countries, including the USA, Turkey, South Korea, Australia, the UK, and China. NCC Group has noted that the claims of responsibility from CRPxO have not been confirmed and highlighted inconsistent evidence regarding their involvement in these attacks.
Activities and Tactics
Information pending cataloguing.
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
- China Chopper:
- CrossRat:
Attribution and Evidence
Information pending cataloguing.
References
References pending cataloguing.