Threat Investigation
Request a demo
Other threat group

CRYSTALRAY

CRYSTALRAY is classified as other threat group.

Type
Other threat group

CRYSTALRAY is a threat actor known for leveraging open source tools like zmap and SSH-Snake to conduct widespread vulnerability scanning and exploitation. They target victims to collect and sell credentials, deploy cryptominers, and maintain persistence in compromised environments. CRYSTALRAY uses multiple backdoors to control access and spreads through victim networks using SSH-Snake. The actor also uses tools like Platypus for managing victims and extracting sensitive information from compromised systems.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.