beast Ransomware
Also known as: GIGAKICK · Tracked since Jul 29, 2025
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Beast is a Ransomware-as-a-service (RaaS) product which provides functionality such as SMB scanning, file encryption, service and process starting and stopping, and geographic identification to avoid encryption in CIS countries.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Credential Theft
Automim · LaZagne · Mimikatz
Discovery Enum
Advanced IP Scanner · Advanced Port Scanner · Everything.exe · SoftPerfect NetScan
Exfiltration
MEGA · WinSCP
LOLBAS
PsExec
Networking
Klink · OpenSSH
RMM-Tools
AnyDesk
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live