Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure
radar Ransomware Group
Ransomware group profile
Description
Dispossessor is a ransomware group that emerged in August 2023, gaining notoriety for targeting various sectors with sophisticated tactics. They specialize in a double extortion strategy, encrypting victims' data and threatening to leak it unless ransom is paid. Their aggressive approach includes direct contact with victims and the use of advanced malware.
Key insights
- •Uses double extortion tactics with threats of data leakage.
- •Employs spear-phishing as an initial attack vector.
- •Targets sectors like healthcare and construction, especially during crises.
- •Utilizes custom ransomware such as Babyk for file encryption.
- •Exploits supply chain vulnerabilities to increase impact.
- •Adopts techniques such as living-off-the-land binaries to evade detection.
Threat Level & Status Breakdown
For radar · Based on incidents in selected period
No victim data for this group in the selected period.
No recent activity in the selected period.
Intelligence
IOCs, YARA/Sigma rules, and related families for radar
- 7eec7d07587112777016e5742c0d002d7e64a3e1fe7bde82fed8f65e3663456a
- e1c371c7c39c16d208bcbaa5b5d0714df696e6ef68b95a880673a904527c8b96
- e06520c65bf27d9110d68ecc0de0e0824c3a99be080ead1a5b5be8fd2a26d12d
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for radar
T1486
T1486
T1490
T1490
T1080
T1080
T1078
T1078
T1562
T1562
T1059
T1059
T1021
T1021
T1021.001
T1021.001
T1547
T1547
T1037
T1037
T1003
T1003
Affected countries(50)
Countries where this group has been reported to target or leak victims.