Ragnarok

Ragnarok is an actor observed by CYFIRMA in an unverified underground-forum auction post. In the cited reporting, the actor used the alias “Ragnarok” and advertised alleged local administrator access to a large company operating in East Asia, with Symantec endpoint protection reportedly present. The provided content does not attribute Ragnarok to a nation state, malware family, or broader intrusion set, and does not provide high-confidence details on tactics, techniques, targets beyond the claimed East Asia access sale, or any known sub-groups. Known alias in the provided content: Ragnarok.