dark project Ransomware Group

Key insights

• •Initial access is achieved through phishing, exploiting remote desktop services, or compromised credentials from infostealer logs.
• •Dark Project exfiltrates vast amounts of sensitive data, from 40GB to over 2TB, including personal and financial records.
• •They employ a double-extortion tactic using a Tor-based leak site to publish stolen data if ransoms are not paid.
• •The group targets various sectors opportunistically, including healthcare, manufacturing, and professional services.
• •Publication of victim identifiers and dataset volumes occurs on their dedicated leak portal.
• •Financial gain is the primary motivation for their criminal activities.