BlackCat, also known as ALPHV or Noberus, emerged in mid-November 2021 as a sophisticated Ransomware-as-a-Service (RaaS) operation, succeeding groups like DarkSide and BlackMatter. The group, assessed with moderate confidence to be of Russian-speaking origin and likely based in a Commonwealth of Independent States (CIS) country, is financially motivated. BlackCat notably differentiates itself by being the first major ransomware written in the Rust programming language, which enables cross-platform compatibility and evasion of some traditional security detections. The group also pioneered establishing a public data leak site on the open internet, not just the dark web, to exert additional pressure on victims. Their extortion model often extends to triple extortion, incorporating Distributed Denial-of-Service (DDoS) attacks alongside data encryption and public data leaks. BlackCat offers high payouts, typically 80-90% of ransoms, to its affiliates, distinguishing its business model withi

Aliases del actor

AlphaVMNoberusALPHVse relaciona con identificadores de Microsoft como DEV-0237DEV-0504

Actores similares

devmanransomware · 184Network Devicesactor · 1Compromise Software Dependencies and Development Toolsactor · 1Device Driver Discoveryactor · 1CS FQL: 32. Detect Data Exfiltration via external storage devicesactor · 1dev-0322actor · 1dev-0343actor · 1weredevilsactor · 1DEV-0147apt · 0DEV-0586apt · 0

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker