0mega Ransomware
Tracked since Jul 14, 2022
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
0mega is a double-extortion ransomware group that emerged in May 2022, targeting businesses across multiple sectors worldwide by encrypting files and threatening to leak stolen data; it also pivoted to cloud-based extortion by compromising Microsoft 365 admin accounts.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Tactics and techniques (MITRE ATT&CK)
Initial Access
T1078 Valid Accounts Privilege Escalation
T1136 Create Account: Cloud Account Defense Evasion
T1531 Account Access Removal Collection
T1119 Automated Collection Exfiltration
T1041 Exfiltration Over C2 Channel Impact
T1486 Data Encrypted for ImpactT1490 Inhibit System Recovery Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live