GINC-APT-0441 · Tracked, unattributed

RansomHouse

Category
Tracked, unattributed · A vendor’s working cluster, not yet attributed.
Origin
Unknown
Sources
5 sources carry it
Identifier
GINC-APT-0441 · ransomhouse

What it is

This group started operating during the first quarter of 2022. They published samples of alleged stolen data from companies on their site on Tor. It is unclear if they conducted the attacks themselves, or if they bought leaked databases from third parties.

Targets

Sectors
Private sector

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de