IOX (f28431cd-1d07-4cf2-bf22-118306dbd8c4)
Open-source proxy, used to establish a reverse proxy to adversary servers from an internal victim device.[U.S. CISA Ghost Cring Ransomware February 19 2025]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| IOX (f28431cd-1d07-4cf2-bf22-118306dbd8c4) | Tidal Software | Ghost Ransomware Actors (9dc09b70-b1c0-45d1-94a8-490943c69166) | Tidal Groups | 1 |