GINC-APT-1203 · Criminal

Quantum Ransomware Actors

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
1 source carries it
Identifier
GINC-APT-1203 · quantum-ransomware-actors

What it is

This Group object reflects the tools & TTPs associated with threat actors known to deploy Quantum ransomware (aka Quantum Locker, which derives from the MountLocker, AstroLocker, and XingLocker ransomware families). The Quantum group is known to publicly extort its victims.<sup>[Cybereason Quantum Ransomware May 9 2022]</sup> Researchers indicate the group is a rebranding of the "Conti Team Two" that formed after the fragmenting of the Ryuk/Conti ransom group in early 2022.<sup>[AdvIntel Bazar Call August 10 2022]</sup>

Tools

The tools and malware families the sources tie to it.

  • Archelaus Beta
  • Cyber Eye RAT
  • CyberGate