- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1203 · quantum-ransomware-actors
What it is
This Group object reflects the tools & TTPs associated with threat actors known to deploy Quantum ransomware (aka Quantum Locker, which derives from the MountLocker, AstroLocker, and XingLocker ransomware families). The Quantum group is known to publicly extort its victims.<sup>[Cybereason Quantum Ransomware May 9 2022]</sup> Researchers indicate the group is a rebranding of the "Conti Team Two" that formed after the fragmenting of the Ryuk/Conti ransom group in early 2022.<sup>[AdvIntel Bazar Call August 10 2022]</sup>
Tools
The tools and malware families the sources tie to it.
- Archelaus Beta
- Cyber Eye RAT
- CyberGate