GINC-APT-0568 · Criminal

RansomVC

Also Ransomed, Ransomed group, Ransomed.vc, RansomedVC, RansomForums.

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
4 sources carry it
Identifier
GINC-APT-0568 · ransomvc

What it is

Ransomed.VC burst onto the scene with a well-orchestrated PR campaign, encompassing a clearnet site and multiple communication channels including Telegram and Twitter/X profiles. Their operations are heavily inclined towards exploiting GDPR penalties as a method of extortion, threatening victims with potential legal repercussions in case of data leaks.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
Ransomed, Ransomed group, Ransomed.vc, RansomedVC, RansomForums

Tools

The tools and malware families the sources tie to it.

  • Xploit

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de