genesis Ransomware Group

Key insights

• •Utilizes phishing and stolen credentials for initial access to networks.
• •Employed double extortion tactics, threatening to publish stolen data if ransoms are not paid.
• •Targets organizations with sensitive data, particularly in finance and health sectors.
• •Exploits unpatched remote access services and uses infostealer malware for credential harvesting.
• •Has a dedicated dark web leak site for publishing victim information.
• •Implements strong encryption and disables backups during attacks.