Abraham's Ax
Aliases: Abrahams_Ax
- First seen
- 2022-11-08 00:00:00
- Malware type
- wiper
- Family
- Malware family
- Profile updated
- 2026-07-07 13:48:39
Targeted industries: government-and-public-sector media-and-entertainment
Targeted regions: country_code:il country_code:ir
Context
Abraham's Ax announced their existence and mission through social media channels such as Twitter posts on November 8, 2022. Abraham's Ax use a WordPress blog as the basis for their leak sites. Abraham's Ax site is available in Hebrew, Farsi, and English. The site also provides versions available via Tor websites, although it appeared to be under construction at the time of analysis. Used domain is registered with EgenSajt.se
Reports & references
- secureworks.com — Abrahams Ax Likely Linked To Moses Staff (report)
- ransomlook.io — Abrahams Ax (report)
- watchguard.com — Abrahams Ax (report)