> Black Basta
PRIMARY ROLE: Ransomware as a Service (RaaS) Operator (Conti Offshoot)
MOTIVATION: Financial (Triple Extortion)
TARGETS: Healthcare, Manufacturing, US, Europe
Click to View Full TTPs...
> ShinyHunters
PRIMARY ROLE: Mass Data Broker and Extortion Group
MOTIVATION: Financial
TARGETS: Cloud Platforms (Snowflake, Salesforce), E-commerce, Tech
Click to View Full TTPs...
> RansomHub
PRIMARY ROLE: Ransomware as a Service (RaaS) Operator
MOTIVATION: Financial
TARGETS: Global Enterprises, Manufacturing, Healthcare
Click to View Full TTPs...
> MedusaLocker
PRIMARY ROLE: Ransomware as a Service (RaaS) Operator
MOTIVATION: Financial
TARGETS: Healthcare, Manufacturing, High RDP Exposure
Click to View Full TTPs...
> Play Ransomware
PRIMARY ROLE: Ransomware as a Service (RaaS) Operator
MOTIVATION: Financial
TARGETS: Government, Financial Services, Law
Click to View Full TTPs...
> APT29 (Cozy Bear)
PRIMARY ROLE: Nation-State Actor (Russia) / Espionage
MOTIVATION: Espionage
TARGETS: Government, Think Tanks, IT Service Providers (Supply Chain)
Click to View Full TTPs...