Quantum is a ransomware group that emerged in August 2021 as a rebrand of the MountLocker ransomware. It is closely associated with the notorious Conti ransomware operation, with many of its members believed to be former Conti affiliates, and operates on a Ransomware-as-a-Service (RaaS) model. The group's primary motivation is financial extortion, achieved through the encryption of victim data and a 'double extortion' tactic that involves exfiltrating sensitive information and threatening its public release if a ransom is not paid. Quantum is particularly distinguished by the extreme speed of its attacks, often deploying ransomware within hours of initial network compromise, a characteristic that significantly reduces defenders' response time and sets it apart from many other ransomware operations. It cannot delete Volume Shadow Copies, a feature present in some other ransomware families.

Aliases del actor

Quantum LockerAPT DRAGONOKDEV-0569ContiQuantumBlack ByteDiavolBlack BastaRyuk (como FIN12)

Actores similares

apt-blackgearactor · 1apt-blacktechactor · 1apt-dragonokactor · 1blackbastaransomware · 523blackbyteransomware · 147BlackBastaactor · 2blackbyte-cruxactor · 1BlackTechapt · 1Blackwoodapt · 0Blackgearapt · 0

Paises afectados

URLs nuevas detectadas en IntelTracker