cloak Ransomware Group

Key insights

• •Utilizes zero-day vulnerabilities and custom malware for infiltration and data encryption.
• •Employs spear-phishing for initial access, often using malicious attachments.
• •Known for multi-layered extortion tactics, combining data encryption, theft, and threats of public release.
• •Targets various sectors, notably healthcare and finance, with high payment rates from victims.
• •Increasingly leveraging initial access brokers to penetrate networks of high-value targets.
• •Shifts towards 'triple extortion' by including DDoS attacks against non-compliant victims.