CVE Intelligence

karakurt Ransomware

🔔 Create alert

Tracked since Dec 11, 2022

0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity

Karakurt is a pure data-extortion group (no encryption) assessed with high confidence to be the extortion arm of the Conti ransomware group, active from 2021, that steals data and threatens to auction or publish it unless ransoms ranging from $25,000 to $13 million are paid.

Vulnerabilities cited for this group

CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.

No CVE associated with this group in the sources.

Observed tools

Credential Theft
Mimikatz
Exfiltration
FileZilla · MEGA · RClone
Networking
Ngrok
Offsec
Cobalt Strike
RMM-Tools
AnyDesk

Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live