GINC-APT-1183 · Criminal

Devman Ransomware Group

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
1 source carries it
Identifier
GINC-APT-1183 · devman-ransomware-group

What it is

Devman is a ransomware operation that has reportedly developed its own custom encryptor software, while also reportedly collaborating with other ransomware groups including Qilin, DragonForce, and RansomHub.<sup>[Cyble Safepay Devman June 3 2025]</sup><sup>[AhnLab Dark Web Trends June 10 2025]</sup>

Tools

The tools and malware families the sources tie to it.

  • Dark DDoSeR