RedRansomware is a ransomware group first observed in June 2024, focusing its operations on large enterprises by demanding hefty ransoms and employing double extortion tactics, which involve threatening to leak stolen data if payment is not made. Their operational methodology includes extensive reconnaissance and lateral movement within compromised networks prior to data encryption. This group distinguishes itself through its organized approach to network infiltration, leveraging vulnerabilities, and social engineering to gain initial access, suggesting a structured and deliberate attack methodology.

Aliases del actor

Red CryptoApp

Actores similares

redalertransomware · 2Scattered Spideractor · 2redactactor · 2Scattered Lapsus$ Huntersthreat-actor · 1redcontroleactor · 1apt-redbaldknightactor · 1apt-redfoxtrotactor · 1apt-redjuliettactor · 1apt-redoctoberactor · 1OS Credential Dumpingactor · 1

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker