majinahanashi Ransomware Group

Key insights

• •Employs custom ransomware that encrypts files with the .majin extension using AES-256 encryption.
• •Utilizes double extortion tactics by demanding ransoms and threatening to publish stolen data on a dedicated Tor leak site.
• •Targets primarily non-English-speaking organizations in sectors such as e-commerce, manufacturing, and healthcare.
• •Strips away defense mechanisms by modifying registry keys and deleting system recovery options.
• •Implements complex network disruption tactics using the Windows Filtering Platform to hinder connectivity during attacks.