TF-MAL-apk.zen
📛 Threat Title
Malware family: Zen
Description
ThreatFox malware family `apk.zen`. Printable name: Zen.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.zen
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.zen
IOC database
- Type
- domain
- Value
apk.zen- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.zen
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.zen
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybernews.com
The FBI warns of a surge in ATM jackpotting attacks, with more than 700 incidents in 2025 alone. Hackers use Ploutus malware to force machines to dispense cash.
-
web:sensorstechforum.com
The content we publish on SensorsTechForum.com, this Zen Ransomware how-to removal guide included, is the outcome of extensive research, hard work and our team's devotion to help you remove the specific malware and restore your encrypted files.
-
web:www.cisa.gov
Remote assistance to identify the extent of the compromise and recommendations for appropriate containment and mitigation strategies (dependent on specific ransomware variant). Phishing email, storage media, log, and malware analysis based on voluntary submission. Full-disk forensics can be performed on an as-needed basis.
-
web:www.enigmasoftware.com
Zen Ransomware is a potent reminder of the evolving and persistent threat posed by ransomware. With its roots in the Dharma family , Zen's capabilities highlight the need for constant vigilance and proactive security measures. While removal of the malware is essential, restoring encrypted files without backups remains improbable.
-
web:www.fortinet.com
FortiGuard Labs discovered new Symbiote and BPFDoor variants exploiting eBPF filters to enhance stealth through IPv6 support, UDP traffic, and dynamic port hopping for covert C2 communication.
-
web:www.itfunk.org
Zen ransomware is a newly discovered variant of the Dharma ransomware family . This malicious program encrypts users' files and adds the . zen extension to them, rendering the files completely inaccessible. Victims are then presented with a ransom note demanding Bitcoin payments in exchange for the decryption key.
-
web:www.ncsc.gov.uk
This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection
-
web:www.pcrisk.com
What kind of malware is Zen ? Our researchers discovered Zen ransomware while inspecting new submissions to the VirusTotal website. This malicious program is part of the Dharma ransomware family . Zen is designed to encrypt data and demand ransoms for the decryption. On our test machine, this ransomware encrypted files and altered their filenames.
-
web:www.techtarget.com
AMD and Google on Monday disclosed CVE-2024-56161, a high-severity microcode signature verification vulnerability affecting AMD Zen processors.
-
web:www.theregister.com
They say their technique works on all Zen -based AMD chips - all Ryzen and Epyc parts, basically. How (not very) random To back up these claims, the Googlers this week released initial details of their findings, and a proof-of-concept microcode update for Milan- family Epyc server chips and Phoenix- family Ryzen 9 desktop processors.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.