raworld Ransomware
Also known as: ragroup · Tracked since May 6, 2023
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
RA Group, also known as RA World, first surfaced in April 2023, utilizing a custom variant of the Babuk ransomware.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Credential Theft
ProcDump
Defense Evasion
Bluetooth Stack for Windows by Toshiba (toshdpdb.exe)
LOLBAS
PsExec
Networking
NPS
Offsec
Impacket
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live