By June 2022, DEV-0237 was still primarily deploying Hive and sometimes Nokoyawa but was seen experimenting with other ransomware payloads, including Agenda and Mindware.
Mindware
Ransomware, potential rebranding of win.sfile.
Profile source: Ransomware.live opens in a new tabMindware
Family profile
Ransomware, potential rebranding of win.sfile.
Operational record
1
YARA rules
1
Leak sites
0 available
Reported operators
Threat actors
1 named in public reportingMITRE ATT&CK
