FusionCore is a European threat actor known for Malware-as-a-Service and hacker-for-hire ransomware schemes.
Analyst brief
FusionCore is an emerging European threat actor operating Malware-as-a-Service and a hacker-for-hire scheme. They target a broad range of victims by offering a one-stop shop for cost-effective, customizable malware and a ransomware affiliate program with full management software. Their primary TTPs involve providing detailed instructions and turnkey ransomware solutions, lowering the barrier to entry for inexperienced attackers. Defenders should monitor for indicators of ransomware deployment, anomalous email and web traffic patterns, and be aware that FusionCore's tools may be used by a wide variety of low-skill adversaries.
FusionCore
unknown
The CYFIRMA research team has identified a new up-and-coming European threat actor group known as FusionCore. Running Malware-as-a-service, along with the hacker-for- hire operation, they have a wide variety of tools and services that are being offered on their website, making it a one-stop-shop for threat actors looking to purchase cost- effective yet customizable malware. The operators have started a ransomware affiliate program that equips the attackers with the ransomware and affiliate software to manage victims. FusionCore typically provides sellers with a detailed set of instructions for any service or product being sold, enabling individuals with minimal experience to carry out complex attacks.