Water Bakunawa, tracked by Trend Micro, is a cybercriminal organization operating the RansomHub Ransomware-as-a-Service (RaaS) platform, which first emerged in February 2024. This group quickly gained notoriety for its "big game hunting" strategy, focusing on larger enterprises likely to pay substantial ransoms. Water Bakunawa distinguishes itself by recruiting affiliates through the Russian cybercriminal dark web forum RAMP and adhering to strict operational rules, including avoiding attacks on non-profit organizations, countries within the Commonwealth of Independent States (CIS), Cuba, North Korea, China, and refraining from re-targeting previous victims who have paid. The group is notably associated with former BlackCat (ALPHV) affiliates, suggesting a possible rebrand or a migration of operators following an alleged BlackCat exit scam, aiming for financial gain through data exfiltration and encryption.

Actores similares

blackwaterransomware · 11clearwateractor · 1MuddyWaterapt · 1muddywateractor · 1Water Labbuapt · 0Water Gamayunapt · 0Water Saciapt · 0Water Barghestapt · 0Water Kuritaapt · 0SHADOW-WATER-063apt · 0