malware

Apostle

S1133 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[Apostle](https://attack.mitre.org/software/S1133) is malware that has functioned as both a wiper and, in more recent versions, as ransomware. [Apostle](https://attack.mitre.org/software/S1133) is written in .NET and shares various programming and functional overlaps with [IPsec Helper](https://attack.mitre.org/software/S1132).(Citation: SentinelOne Agrius 2021)

Actors that use this

1 tracked actor

Agrius (Agonizing Serpens / BlackShadow)ATT&CK-attributed