karakurt Ransomware
Tracked since Dec 11, 2022
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Karakurt is a pure data-extortion group (no encryption) assessed with high confidence to be the extortion arm of the Conti ransomware group, active from 2021, that steals data and threatens to auction or publish it unless ransoms ranging from $25,000 to $13 million are paid.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Credential Theft
Mimikatz
Exfiltration
FileZilla · MEGA · RClone
Networking
Ngrok
Offsec
Cobalt Strike
RMM-Tools
AnyDesk
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live