Water Curupira is a cybercriminal group that emerged in 2022, primarily focused on ransomware operations and financial gain, often associated with the Black Basta ransomware. While initially described as a cyber espionage group, recent intelligence highlights their evolution into a prolific distributor of loader malware, particularly Pikabot, to facilitate ransomware attacks. The group is distinguished by its strategic shift in toolsets, rapidly adopting new loaders like Pikabot following the disruption of others like Qakbot, and leveraging sophisticated email-based social engineering tactics for initial access.

Actores similares

blackwaterransomware · 11clearwateractor · 1MuddyWaterapt · 1muddywateractor · 1Water Labbuapt · 0Water Gamayunapt · 0Water Saciapt · 0Water Barghestapt · 0Water Kuritaapt · 0SHADOW-WATER-063apt · 0