GINC Technology
GINC-APT-1111 · Criminal

Darkrypt

Also Yellow Dev 21.

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Iran(medium confidence)
Sources
2 sources carry it
Identifier
GINC-APT-1111 · darkrypt

What it is

Darkrypt is an active extortion or ransomware group tracked by RansomLook.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
Yellow Dev 21

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Western sources