LV is a ransomware group that first emerged in late 2020. It operates as a ransomware-as-a-service (RaaS) offering, primarily distinguished by its use of a modified REvil (also known as Sodinokibi) ransomware binary. The group's primary motivation is financial gain through double extortion, where they encrypt victim data and threaten to leak stolen information. While they often frame their attacks as retaliation against organizations that fail to protect data, this serves as a justification for their financially driven operations. Despite leveraging a powerful, repurposed ransomware, LV's backend infrastructure is considered less sophisticated than the original REvil operation, specifically lacking the extensive command and control network.

Aliases del actor

Dark HaloNobeliumSilver Fishla penetración de sistemas críticosFraternal JackalAbabilha sido identificado con la plataforma pastebinNigeriaKwampirs backdoorempresas farmacéuticasproveedores de soluciones IT para el sector sanitariofabricantes de equipos médicosPowerkatzPassword DumperPTHDCSyncSkeletonKeyGoldenSilver Ticketsotrosse clasifica dentro de la categoría "Malware / Tools"HellsingCycldekConimes TeamChina1937CN Teamotros mencionados en fuentes OSINT verificadasAgriculture in EUPlugXsegún informes verificadosEnergy technologyG20NGOs

Actores similares

SilverFishapt · 0DarkStorm Teamapt · 0apt-1877teamactor · 1apt-darkcaracalactor · 1apt-darkhydrusactor · 1apt-equationgroupactor · 1apt-goldenjackalactor · 1apt-greyenergyactor · 1apt-hackingteamactor · 1apt-stealthfalconactor · 1

URLs nuevas detectadas en IntelTracker