RAGROUP is a ransomware group that emerged in mid-April 2023, notably launching its data leak site by April 22, 2023. The group's operations are financially motivated, and it is distinguished by its use of customized ransomware derived from the leaked Babuk source code, with unique modifications such as intermittent file encryption to evade detection. RAGROUP employs a double extortion model, threatening to publish exfiltrated victim data if ransoms are not paid. They are also known for tailoring ransom notes with specific victim names and details, and uncommonly, for selling stolen data.

Aliases del actor

RA World

Actores similares

worldleaksransomware · 167raworldransomware · 1