NetWalker Defunct
Also known as: Mailto
RaaS disrupted by law enforcement in January 2021. Canadian affiliate sentenced.
163
Total Victims
2019-08-01
First Seen
2020-12-27
Last Seen
23
Known TTPs
4.7d
Avg Delay
0
Negotiations
ONION URLS
rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
TOOLS
Cobalt Strike
Mimikatz
FILE EXTENSIONS
.nwlkr
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2020-12-27 | Euro Packaging | United Kingdom | Technology | Published |
| 2020-12-24 | Atlas Dynamics LLC | Switzerland | Real Estate | Published |
| 2020-12-22 | Empire Legal Inc. | Bulgaria | Legal | Published |
| 2020-12-19 | Summit & Envision Labs | United States | Education | Published |
| 2020-12-17 | DynamicClinic | United States | Agriculture | Published |
| 2020-12-17 | Onyx Wave Ltd | United States | Technology | Published |
| 2020-12-05 | City Connect LLC | Italy | Government | Published |
| 2020-11-27 | HarborIntegrated | Ireland | Aerospace & Defense | Removed |
| 2020-11-21 | Diamond Sciences Inc. | South Africa | Manufacturing | Published |
| 2020-11-20 | Red Intel | India | Insurance | Published |
| 2020-11-18 | Core Financial Ltd | Germany | Utilities | Negotiating |
| 2020-11-13 | Central Care Inc. | Puerto Rico | Healthcare | Published |
| 2020-11-11 | Golden Digital Ltd | United States | Professional Services | Negotiating |
| 2020-11-10 | Diamond Electronics Ltd | Canada | Healthcare | Published |
| 2020-11-01 | Capital Path GmbH | Germany | Media & Entertainment | Published |
| 2020-11-01 | SageWave | United States | Manufacturing | Published |
| 2020-10-28 | Mountain Products LLC | Australia | Financial Services | Published |
| 2020-10-28 | Verde & Royal Place | Spain | Manufacturing | Published |
| 2020-10-25 | Sierra Guard | France | Technology | Published |
| 2020-10-20 | Titan Partners LLC | United States | Financial Services | Negotiating |
| 2020-10-20 | Excel Legal Ltd | Switzerland | Financial Services | Negotiating |
| 2020-10-14 | Spring Telecom GmbH | Australia | Insurance | Removed |
| 2020-10-12 | Legacy Metals | Netherlands | Government | Published |
| 2020-10-06 | UltraSports | Puerto Rico | Manufacturing | Published |
| 2020-10-05 | Lone Star Enterprises GmbH | United States | Media & Entertainment | Published |
| 2020-09-28 | Titan Bridge Inc. | Norway | Technology | Published |
| 2020-09-26 | Rock Wire Ltd | United States | Manufacturing | Published |
| 2020-09-21 | Advanced Innovations LLC | United States | Education | Published |
| 2020-09-19 | Atlas Design | United Kingdom | Financial Services | Published |
| 2020-09-19 | Key & Synergy Wave | Germany | Technology | Published |
| 2020-09-16 | Ultra Med Ltd | Belgium | Healthcare | Removed |
| 2020-09-15 | Peninsula Foods | United Kingdom | Automotive | Published |
| 2020-09-13 | Sapphire Oil Inc. | Lithuania | Construction | Removed |
| 2020-09-12 | Infinity Technologies Inc. | New Zealand | Retail | Removed |
| 2020-09-10 | SterlingRobotics | Taiwan, Province of China | Technology | Negotiating |
| 2020-09-08 | Zenith & Delta Labs | United States | Education | Removed |
| 2020-09-06 | Stone Sports LLC | Italy | Healthcare | Published |
| 2020-09-05 | Atlas Health Ltd | Finland | Legal | Negotiating |
| 2020-09-01 | WolfCare | United States | Financial Services | Published |
| 2020-08-25 | Modern Care Inc. | Guatemala | Technology | Published |
| 2020-08-25 | Vanguard Aero | India | Education | Published |
| 2020-08-24 | NewPrint | United Kingdom | Healthcare | Published |
| 2020-08-23 | Liberty Wave Inc. | Poland | Aerospace & Defense | Published |
| 2020-08-20 | Highland Management | Belgium | Logistics | Published |
| 2020-08-19 | Metro & Patriot Water | United States | Manufacturing | Published |
| 2020-08-17 | Infinity Comm Inc. | Guatemala | Technology | Published |
| 2020-08-08 | Vanguard Digital GmbH | Argentina | Government | Published |
| 2020-08-07 | Spring & Power Data | United States | Technology | Published |
| 2020-08-04 | Onyx Ship LLC | United States | Government | Published |
| 2020-08-03 | Golden Bio GmbH | Canada | Manufacturing | Removed |
| 2020-08-03 | Synergy Corp LLC | Spain | Telecommunications | Removed |
| 2020-08-02 | Pulse Therapeutics LLC | United States | Aerospace & Defense | Removed |
| 2020-07-24 | Solid Mechanical Ltd | United Kingdom | Manufacturing | Published |
| 2020-07-24 | NordicFoods | United States | Healthcare | Published |
| 2020-07-23 | Prairie Comm | Portugal | Education | Published |
| 2020-07-18 | Inland Systems | Germany | Transportation | Published |
| 2020-07-18 | Mid Finance | Luxembourg | Financial Services | Published |
| 2020-07-09 | Solar & Crown Rail | United States | Aerospace & Defense | Published |
| 2020-07-06 | Capital Pro Inc. | Brazil | Transportation | Published |
| 2020-07-05 | ValleyInsurance | Germany | Healthcare | Negotiating |
| 2020-07-03 | Envision & Willow Pharma | United States | Retail | Removed |
| 2020-07-03 | BayHealth | Belgium | Food & Beverage | Published |
| 2020-06-28 | EmpireMedia | Germany | Food & Beverage | Published |
| 2020-06-27 | WesternDigital | Ukraine | Logistics | Removed |
| 2020-06-21 | TrueSystems | United States | Automotive | Published |
| 2020-06-21 | UniversalDev | United Kingdom | Retail | Removed |
| 2020-06-20 | Infinity Associates LLC | United States | Financial Services | Published |
| 2020-06-10 | Star Pro LLC | Costa Rica | Healthcare | Published |
| 2020-06-10 | Inter Mining LLC | Denmark | Mining | Published |
| 2020-06-05 | Advanced Management Ltd | Brazil | Government | Removed |
| 2020-06-03 | Progressive Partners Ltd | India | Government | Published |
| 2020-05-27 | Genesis Therapeutics LLC | Slovenia | Financial Services | Published |
| 2020-05-26 | DynamicFoods | Philippines | Manufacturing | Removed |
| 2020-05-24 | Willow Dev Ltd | Philippines | Construction | Published |
| 2020-05-24 | Vital Power Ltd | Israel | Manufacturing | Published |
| 2020-05-23 | Delta Web GmbH | Slovenia | Government | Published |
| 2020-05-16 | Solar Works Inc. | Costa Rica | Financial Services | Published |
| 2020-04-28 | Pulse & Onyx Dental | Korea, Republic of | Professional Services | Removed |
| 2020-04-28 | East Rail Inc. | Norway | Government | Published |
| 2020-04-27 | GrandHomes | Switzerland | Financial Services | Removed |
| 2020-04-26 | New Corp LLC | United States | Media & Entertainment | Published |
| 2020-04-23 | Sunrise & Smart Data | Taiwan, Province of China | Logistics | Published |
| 2020-04-18 | North Cast Ltd | Venezuela, Bolivarian Republic of | Education | Published |
| 2020-04-16 | PrimeMining | United States | Professional Services | Removed |
| 2020-04-14 | NobleFreight | Germany | Technology | Published |
| 2020-04-10 | Alpha Dental GmbH | Türkiye | Legal | Published |
| 2020-04-08 | Sunrise Vision LLC | Japan | Government | Removed |
| 2020-04-07 | Maple Resources | France | Construction | Negotiating |
| 2020-04-05 | Titan Energy Ltd | Germany | Education | Published |
| 2020-04-04 | Smart Wellness LLC | United States | Education | Published |
| 2020-03-27 | Green Vision LLC | Netherlands | Retail | Published |
| 2020-03-26 | Eagle Plus LLC | France | Logistics | Negotiating |
| 2020-03-25 | Nordic & Patriot Pharma | Venezuela, Bolivarian Republic of | Telecommunications | Published |
| 2020-03-23 | Platinum Resources Inc. | India | Energy | Published |
| 2020-03-18 | Rapid Dev GmbH | Luxembourg | Food & Beverage | Published |
| 2020-03-18 | Atlas Print | Canada | Aerospace & Defense | Published |
| 2020-03-17 | Steel Pro Inc. | United States | Government | Published |
| 2020-03-13 | Alpha Web Inc. | Chile | Energy | Published |
| 2020-03-07 | Guardian Bank LLC | Ukraine | Healthcare | Published |
| 2020-03-05 | Ultra Solutions | Belgium | Education | Published |
| 2020-03-04 | American Defense | Chile | Manufacturing | Published |
| 2020-02-11 | Allied & Core Holdings | United States | Energy | Published |
| 2020-02-04 | Apex Express GmbH | United Kingdom | Government | Published |
| 2020-01-15 | Swift Wealth Ltd | Czechia | Technology | Published |
| 2020-01-14 | Lighthouse Path Ltd | Denmark | Healthcare | Removed |
| 2020-01-11 | Spectrum Hospitality | Dominican Republic | Manufacturing | Published |
| 2020-01-05 | Sage Technologies | France | Transportation | Published |
| 2019-12-27 | Steel Info | United Kingdom | Manufacturing | Removed |
| 2019-12-27 | SouthWorld | Luxembourg | Retail | Published |
| 2019-12-26 | True Intel | United States | Pharmaceuticals | Removed |
| 2019-12-24 | South Cloud | United States | Healthcare | Removed |
| 2019-12-24 | West Therapeutics GmbH | United States | Technology | Published |
| 2019-12-23 | Highland Health LLC | United States | Manufacturing | Published |
| 2019-12-21 | Oak Services Inc. | Spain | Food & Beverage | Published |
| 2019-12-21 | Key Hospital | United States | Healthcare | Removed |
| 2019-12-14 | Power Risk Ltd | India | Insurance | Removed |
| 2019-12-05 | Noble & Shield Bridge | Australia | Manufacturing | Published |
| 2019-11-27 | Crown & Palm Manufacturing | United States | Manufacturing | Negotiating |
| 2019-11-25 | Red & East Trade | Germany | Real Estate | Published |
| 2019-11-22 | Platinum & Royal Operations | United States | Hospitality | Published |
| 2019-11-15 | Palm Oil Ltd | United States | Telecommunications | Published |
| 2019-11-14 | Mountain Point LLC | Dominican Republic | Education | Published |
| 2019-11-05 | Sun Care | Austria | Transportation | Published |
| 2019-11-04 | Silver & Rapid Data | Australia | Real Estate | Published |
| 2019-11-04 | Summit Materials GmbH | Germany | Healthcare | Removed |
| 2019-11-01 | Western Associates GmbH | United States | Legal | Published |
| 2019-10-27 | Steel Care LLC | France | Education | Published |
| 2019-10-27 | Willow Media Inc. | United States | Technology | Negotiating |
| 2019-10-26 | Ridge Transport GmbH | Italy | Government | Negotiating |
| 2019-10-23 | RockTelecom | United States | Food & Beverage | Published |
| 2019-10-22 | Core Dental GmbH | France | Telecommunications | Published |
| 2019-10-15 | United Auto GmbH | United States | Transportation | Published |
| 2019-10-14 | RidgeOperations | Germany | Technology | Published |
| 2019-10-14 | Pro Clinic LLC | Latvia | Real Estate | Published |
| 2019-10-14 | Sun Rail GmbH | United States | Manufacturing | Published |
| 2019-10-14 | Nordic Technologies Ltd | United States | Government | Published |
| 2019-10-09 | Zenith Risk | Indonesia | Real Estate | Published |
| 2019-10-05 | Excel Works Ltd | United States | Healthcare | Removed |
| 2019-10-03 | Omni Energy | France | Retail | Published |
| 2019-10-02 | Inland Financial LLC | United States | Telecommunications | Published |
| 2019-10-02 | Guardian & Onyx Security | Canada | Manufacturing | Published |
| 2019-10-01 | Modern Place Inc. | United States | Aerospace & Defense | Published |
| 2019-10-01 | Dynamic Hospital LLC | Romania | Retail | Published |
| 2019-09-25 | Core Force Inc. | Italy | Financial Services | Published |
| 2019-09-24 | Summit Pharma GmbH | Argentina | Financial Services | Removed |
| 2019-09-23 | River Systems LLC | Chile | Retail | Published |
| 2019-09-16 | Orange CyberDefense Deutschland | Poland | Technology | Published |
| 2019-09-15 | National Space | Japan | Real Estate | Removed |
| 2019-09-12 | Silver Transport Inc. | Costa Rica | Construction | Removed |
| 2019-09-10 | Imperial & Keystone Gen | Germany | Pharmaceuticals | Published |
| 2019-09-09 | Valley Electronics GmbH | United States | Aerospace & Defense | Published |
| 2019-09-04 | East Comm Inc. | Dominican Republic | Healthcare | Published |
| 2019-08-19 | Innovative Electronics GmbH | United Kingdom | Technology | Published |
| 2019-08-18 | Capital Rail LLC | Ecuador | Food & Beverage | Published |
| 2019-08-17 | Pro Express GmbH | Chile | Manufacturing | Removed |
| 2019-08-17 | South Works GmbH | Indonesia | Healthcare | Published |
| 2019-08-17 | Advanced Hospitality LLC | Slovakia | Logistics | Published |
| 2019-08-17 | Genesis & Spring Associates | Guatemala | Government | Published |
| 2019-08-16 | Elite & Iron Print | France | Energy | Published |
| 2019-08-13 | Highland Digital | Canada | Government | Removed |
| 2019-08-10 | West Foods LLC | Netherlands | Financial Services | Published |
| 2019-08-08 | Highland & Lake Print | Taiwan, Province of China | Non-Profit | Published |
| 2019-08-05 | Pulse & White Pharma | India | Automotive | Removed |
| Technique ID | Technique Name | Tactic |
|---|---|---|
| T1039 | Data from Network Shared Drive | Collection |
| T1560.001 | Archive via Utility | Collection |
| T1105 | Ingress Tool Transfer | Command and Control |
| T1219 | Remote Access Software | Command and Control |
| T1552.001 | Credentials In Files | Credential Access |
| T1558.003 | Kerberoasting | Credential Access |
| T1087 | Account Discovery | Discovery |
| T1059.001 | PowerShell | Execution |
| T1059.005 | Visual Basic | Execution |
| T1204.002 | Malicious File | Execution |
| T1041 | Exfiltration Over C2 Channel | Exfiltration |
| T1048.003 | Exfiltration Over Unencrypted Non-C2 Protocol | Exfiltration |
| T1567.002 | Exfiltration to Cloud Storage | Exfiltration |
| T1531 | Account Access Removal | Impact |
| T1078 | Valid Accounts | Initial Access |
| T1189 | Drive-by Compromise | Initial Access |
| T1190 | Exploit Public-Facing Application | Initial Access |
| T1195.002 | Compromise Software Supply Chain | Initial Access |
| T1566.001 | Spearphishing Attachment | Initial Access |
| T1021.002 | SMB/Windows Admin Shares | Lateral Movement |
| T1570 | Lateral Tool Transfer | Lateral Movement |
| T1547.001 | Registry Run Keys | Persistence |
| T1068 | Exploitation for Privilege Escalation | Privilege Escalation |
No YARA rules
No IoCs
No ransom notes