Back to Groups
fog
INACTIVEFog, which uses the .flocked extension for encrypted files, was first observed in May in campaigns by Storm-0844, a threat actor known for distributing Akira. By June, Storm-0844 was deploying Fog more than Akira.
0
Total Victims
First Seen
Unknown
Last Active
Unknown
Known Sites
4