moneymessage Ransomware Group
Ransomware group profile
Description
MoneyMessage is a ransomware group that emerged in March 2023, focusing on financial gain through sophisticated cyber attacks. They use double extortion tactics, encrypting data while threatening to leak sensitive information to pressure victims into compliance. Their operations have impacted high-profile organizations across various sectors worldwide.
Key insights
- •Employs double extortion tactics, encrypting data and threatening to leak it.
- •Gains initial access via targeted phishing and social engineering attacks.
- •Utilizes unique ransomware that encrypts files without changing their names.
- •Targets both Windows and Linux operating systems, including VMware ESXi servers.
- •Deletes Volume Shadow Copies to evade detection during attacks.
- •Maintains a dark web site for extortion and data leak threats.
Threat Level & Status Breakdown
For moneymessage · Based on incidents in selected period
Status Breakdown
Recent activity
Monthly attack count for moneymessage in the selected period
Intelligence
IOCs, YARA/Sigma rules, and related families for moneymessage
- f0e2d4c7a6b9d8e0f1e3c5a7b9d1e0f2d4e723f156104c997b5e43a6d71b56a3
- a2b1c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for moneymessage
T1486
T1486
T1490
T1490
T1021
T1021
T1562
T1562
T1080
T1080
T1078
T1078
T1547
T1547
T1059
T1059
T1021.001
T1021.001
T1112
T1112
T1027
T1027
T1136
T1136
Victims(5)
| Company | Domain | Country | Industry | Status | Discovered | |
|---|---|---|---|---|---|---|
| Envision Unlimited | envisionunlimited.org | US United States | Healthcare | Claimed | 7 days ago | |
| X-Copper Professional | xcopper.com | CA Canada | Manufacturing | Claimed | 14 days ago | |
| Forestdale | forestdaleinc.org | GB United Kingdom | Professional Services | Claimed | 2 months ago | |
| Family Partnerships of Central Florida | fpocf.org | US United States | Manufacturing | Claimed | 6 months ago | |
| Bucks County Opportunity Council, INC. | bcoc.org | US United States | Manufacturing | Claimed | 12 months ago |
Affected countries(17)
Countries where this group has been reported to target or leak victims.