threeam Ransomware Group

Key insights

• •Utilizes custom-built ransomware variants written in Rust.
• •Employs social engineering tactics to gain initial access, including phishing and voice phishing.
• •Focuses on double extortion by encrypting files and threatening to release sensitive data publicly.
• •Targets high-value sectors such as healthcare and financial services.
• •Uses advanced evasion techniques like disabling security software and deleting Volume Shadow Copies.
• •Linked to other ransomware operations like LockBit and Conti, indicating a collaborative nature among threat groups.