Sha 1
2 totaldbd05e2da5385928cbeb7b9695e825c588bede8ea515b7d89676b1401eeb9eb776190a1179c386cf
Ransomware group
Termite
Termite is a ransomware and extortion operation associated with incidents including the November 2024 disruption at Blue Yonder.
Profile source: Ransomware.live opens in a new tabTermite
Family profile
Termite is a ransomware and extortion operation associated with incidents including the November 2024 disruption at Blue Yonder. This profile excludes the unrelated Linux backdoor and memory-only dropper that also use the Termite name.
Ransomware.live
Operational record
Ransomware.live
Published indicators
Sha 256
2 total30a8cf3e6863030c762b468bf48d679f3dd053a80793770443938fa18de89617f0ec54b9dc2e64c214e92b521933cee172283ff5c942cf84fae4ec5b03abab55
Md5
2 total4c58195328f5b5e4a37aa6f42b3861726b06aae5ec596cdbc1b9d4c457fd5f81
Ip
2 total193.43.104.15387.121.45.33
Reporting
Research mentioning Termite
Mar 13
Bleeping Computer
Starbucks discloses data breach affecting hundreds of employees
The coffee chain was also hit by the aftermath of a Termite ransomware attack that affected Blue Yonder (Starbucks' supply chain software provider) in November 2024.
Mar 12
Bleeping Computer
US charges another ransomware negotiator linked to BlackCat attacks
"Termite ransomware breaches linked to ClickFix CastleRAT attacks"
Mar 2
The Hacker News
⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More
Threat hunters disclosed multiple ClickFix campaigns, including one leading to a hands-on-keyboard attack that deployed the Termite ransomware.
Mar 2
Risky Biz Rss
LLMs can deanonymize internet users based on their comments
The Deception Pro team has spotted a ClickFix campaign leading to a hands-on-keyboard attack that deployed the Termite ransomware.
Feb 25
Splunk Research
Detection: High Process Termination Frequency | Splunk Security Content
Associated Analytic Story BlackByte Ransomware Clop Ransomware Crypto Stealer Hellcat Ransomware Interlock Ransomware LockBit Ransomware Medusa Ransomware NailaoLocker Ransomware Rhysida Ransomware Snake Keylogger Termite Ransomware
Feb 25
Splunk Research
Detection: Windows Security And Backup Services Stop | Splunk Security Content
Associated Analytic Story Termite Ransomware
Feb 25
Splunk Research
Detection: Common Ransomware Extensions | Splunk Security Content
Associated Analytic Story Ryuk Ransomware SamSam Ransomware Termite Ransomware
Jan 16
Splunk Research
Detection: Common Ransomware Notes | Splunk Security Content
Associated Analytic Story Termite Ransomware
