DarkPower is a ransomware group that first gained significant public attention and activity in early 2023, though its origins can be traced back to early 2020 as a less prominent strain. The group's primary motivation is financial gain through demanding ransom payments. DarkPower distinguishes itself by primarily employing the Nim programming language for its ransomware, which contributes to its agility and ability to evade detection, and by engaging in double extortion tactics. The group is characterized by its opportunistic targeting across various sectors globally rather than focusing on specific regions or industries, and it has not been publicly associated with aliases that lead to confusion with other threat actors.

Aliases del actor

httpswww

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker