CyberVolk is a politically motivated hacktivist collective originating from India with pro-Russia leanings, which emerged in its current form in May 2024. The group transitioned from conducting distributed denial-of-service (DDoS) and defacement attacks to launching its own Ransomware-as-a-Service (RaaS) operations in June 2024. CyberVolk's primary motivation is to leverage geopolitical issues to justify attacks on public and government entities, particularly those opposed to Russian interests, while also engaging in financially motivated cybercrime. The group is notable for its rapid evolution, rebranding from earlier identities like GLORIAMIST India and Solntsevskaya Bratva, and its adaptability in adopting and repurposing existing commodity malware, including its self-branded ransomware derived from AzzaSec code. A defining characteristic is the introduction of its VolkLocker RaaS in August 2025, which, despite advanced features, was identified with a critical design flaw involving

Aliases del actor

GLORIAMIST IndiaCyberVolk 2.xCV-RansomVolkRansomVolkCryptCyberFolkCyberVVolkLockerSolntsevskaya BratvaCyb3r BytesCyberBytesBinary Ghosts

Actores similares

lockbit3ransomware · 2016qilinransomware · 1933akiraransomware · 1524playransomware · 1268clopransomware · 1254lockbit2ransomware · 1002ransomhubransomware · 842incransomransomware · 832alphvransomware · 731dragonforceransomware · 580