[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxNAoX7H6ggaepr_NLqM7EHPhoAHIBIs634L1ATcojC8":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":10,"target_industries":11,"target_countries":12,"incident_types":13,"references":14,"techniques":16,"technique_count":17,"created_at":18,"seoMetadata":19,"schemaOrg":23},"CosmicBeetle","cosmicbeetle",[],"CosmicBeetle is a threat actor known for deploying the ScRansom ransomware, which has replaced its previous variant, Scarab. The actor utilizes a custom toolset called Spacecolon, consisting of ScHackTool, ScInstaller, and ScService, to gain initial access through RDP brute forcing and exploiting vulnerabilities like CVE-2020-1472 and FortiOS SSL-VPN. CosmicBeetle has been observed impersonating the LockBit ransomware gang to leverage its reputation and has shown a tendency to leave artifacts on compromised systems. The group primarily targets SMBs globally, employing techniques such as credential dumping and data destruction.",null,[],[],[],[15],"https:\u002F\u002Fwww.welivesecurity.com\u002Fen\u002Feset-research\u002Fcosmicbeetle-steps-up-probation-period-ransomhub\u002F",[],0,"2024-10-04T01:15:03.259744+00:00",{"title":20,"metaDescription":21,"keywords":22},"CosmicBeetle Threat Actor Profile | EdgeProtect","CosmicBeetle is a threat actor known for deploying the ScRansom ransomware, which has replaced its previous variant, Scarab. The actor utilizes a cust...","CosmicBeetle, threat actor, APT, cyber threat, threat intelligence",{"@context":24,"@type":25,"name":6,"alternateName":26,"description":9,"url":27,"mainEntityOfPage":28},"https:\u002F\u002Fschema.org","Organization",[],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fcosmicbeetle",{"@type":29,"@id":27},"WebPage"]