Alpha ransomware linked to NetWalker operation dismantled in 2021

Alpha ransomware linked to NetWalker operation dismantled in 2021

February 16, 2024 at 11:12AM

Alpha ransomware, emerging in 2023 with a low profile, has recently ramped up attacks and launched a data leak site. Symantec links it to the now-defunct Netwalker ransomware based on tools and tactics, indicating a strong link between the two. Alpha, an emerging threat, demands between 0.272 BTC and up to $100,000 in ransom.

Key takeaways from the meeting notes are:

– The Alpha ransomware operation shares significant similarities with the now-defunct Netwalker ransomware operation, suggesting a potential link between the two.

– Alpha ransomware has recently become more active, launching a data leak site to list victims and publish stolen files.

– Recent reports indicate that Alpha’s attacks have become more sophisticated, with ransom demands ranging from 0.272 BTC to $100,000, depending on the size of the victim’s business.

– Symantec’s threat analysts have identified several common tools, tactics, techniques, and procedures used in attacks by both Netwalker and Alpha ransomware, indicating a strong link between the two operations.

– There are indications that a new threat group or attacker may have acquired the Netwalker payload and adapted it for use in the Alpha ransomware operation.

Overall, Alpha is considered an emerging threat that organizations should closely monitor.

Full Article