cicada3301 Ransomware
Tracked since Jun 20, 2024
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Cicada3301 is a ransomware-as-a-service group (tracked as Repellent Scorpius by Palo Alto) that emerged in mid-2024 using Rust-based ransomware targeting Windows, Linux, and ESXi systems, suspected to be a successor of BlackCat/ALPHV and running an affiliate program with 20% commissions.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Defense Evasion
EDRSandBlast
Discovery Enum
ADRecon · PowerView · SoftPerfect NetScan
Exfiltration
RClone
LOLBAS
BCDEdit · PsExec · WMIC
Networking
GOST · Plink
Offsec
PowerSploit · Rubeus
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live