VoidCrypt Ransomware Group

Key insights

• •Employed ransomware variants include Encrypt, Solo, and Dark, each using unique file extensions.
• •Initial access methods include phishing, malicious hyperlinks, and exploiting insecure RDP connections.
• •The group uses AES-256 or RSA encryption algorithms to secure files.
• •VoidCrypt offers a small number of free decryption attempts to demonstrate its capabilities to victims.
• •It engages in double extortion by threatening to publish stolen data if ransoms are not paid.
• •Ransom payments are typically requested in Bitcoin and are often accompanied by ransom notes.