Morpheus is a ransomware and data extortion group that first emerged in late 2024, with its activity traceable back to at least September 2024, and its data leak site launching in December 2024. Operating as a semi-private Ransomware-as-a-Service (RaaS) model, Morpheus focuses on double-extortion by encrypting files and exfiltrating sensitive data for leverage. Its primary motivation is financial gain through a "big game hunting" strategy, targeting high-value organizations to maximize profit. What sets Morpheus apart is its unique extortion tactic of preferring private sales of stolen data over public leaks to control risk and extract larger sums, and its ransomware payloads do not alter file extensions, making detection potentially more challenging. Morpheus ransomware payloads are notably similar to those used by the HellCat operation, suggesting shared codebases or affiliates within the evolving ransomware ecosystem.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker