- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1188 · ghost-ransomware-actors
What it is
Ghost actors, located in China, conduct widespread ransomware attacks for financial gain. They target networks with vulnerabilities, affecting organizations across more than 70 countries, including critical infrastructure, schools, healthcare, and more.<sup>[U.S. CISA Ghost Cring Ransomware February 19 2025]</sup>
Tools
The tools and malware families the sources tie to it.
- China Chopper
- CrossRat
- Ghost