metaencryptor Ransomware Group

Key insights

• •Utilizes AES-256 for file encryption and RSA-2048 for key encryption.
• •Employs double extortion tactics, including data theft prior to encryption.
• •Targets primarily healthcare institutions, demanding ransoms exceeding $1 million.
• •Established aggressive use of zero-day vulnerabilities and cloud-based service targeting.
• •Employs techniques like credential harvesting and lateral movement using legitimate tools.
• •Notable for rapid evolution and rebranding, indicating a persistent operational continuity.