Ligolo (3113cb05-23b4-4f90-ab7a-623b800302ce)

Ligolo is a tool used to establish SOCKS5 or TCP tunnels from a reverse connection.^{[U.S. CISA Understanding LockBit June 2023]}

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Fox Kitten (7094468a-2310-48b5-ad24-e669152bd66d)	Tidal Groups	Ligolo (3113cb05-23b4-4f90-ab7a-623b800302ce)	Tidal Software	1
Ligolo (3113cb05-23b4-4f90-ab7a-623b800302ce)	Tidal Software	MuddyWater (dcb260d8-9d53-404f-9ff5-dbee2c6effe6)	Tidal Groups	1
Ligolo (3113cb05-23b4-4f90-ab7a-623b800302ce)	Tidal Software	BlackCat Ransomware Actors & Affiliates (33159d02-a1ce-49ec-a381-60b069db66f7)	Tidal Groups	1
LockBit Ransomware Actors & Affiliates (d0f3353c-fbdd-4bd5-8793-a42e1f319b59)	Tidal Groups	Ligolo (3113cb05-23b4-4f90-ab7a-623b800302ce)	Tidal Software	1