flocker
Ransomware group profile
Description
FuckSociety Ransomware, also known as FSociety or Flocker, is a Ransomware-as-a-Service operation that emerged in April 2024. It utilizes a double extortion model for financial gain while collaborating with other ransomware entities. Key characteristics include exploiting vulnerabilities, phishing attacks, and providing affiliates with advanced tools for enhanced operations.
Key insights
- •Utilizes a double extortion model, encrypting files and stealing sensitive data for ransom.
- •Initial access is gained through phishing emails, compromised RDP credentials, and software vulnerabilities.
- •Employs Flocker ransomware with various features including command-and-control capabilities and a crypto stealer.
- •Disables security tools and deletes backups to hinder detection and recovery efforts.
- •Ransom demands range from £0.5 million to £3 million, with public pressure tactics for compliance.
Threat Level & Status Breakdown
For flocker · Based on incidents in selected period
Status Breakdown
Recent activity
Monthly attack count for flocker in the selected period
No intelligence data for this group.
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for flocker
T1486
T1486
T1490
T1490
T1021
T1021
T1562
T1562
T1080
T1080
T1078
T1078
T1547
T1547
T1059
T1059
T1021.001
T1021.001
T1213
T1213
T1071
T1071
T1047
T1047
Victims(7)
| Company | Domain | Country | Industry | Status | Discovered | |
|---|---|---|---|---|---|---|
| Ieee-apscon.org | ieee-apscon.org | US United States | Technology | Claimed | 10 months ago | |
| H**u.i*v.tw | — | TW Taiwan | Education | Claimed | 10 months ago | |
| G*****n.com | — | NA Namibia | Financial Services | Claimed | 10 months ago | |
| G*********************y.org | — | NA Namibia | Government & Defense | Claimed | 11 months ago | |
| S******h.com | — | US United States | Professional Services | Claimed | 11 months ago | |
| I*******n.com | — | KY Cayman Islands | Retail & E-Commerce | Claimed | 11 months ago | |
| Idgcayman.com | idgcayman.com | KY Cayman Islands | Professional Services | Claimed | 11 months ago |
Affected countries(12)
Countries where this group has been reported to target or leak victims.