November 1, 2023 at 07:55AM
The owner of the RansomedVC ransomware operation is attempting to sell the operation, offering a 20 percent discount to a verified and trusted buyer. The sale includes the ransomware builder, access to affiliate groups and social media channels, and 37 databases worth over $10 million. It is speculated that the sale may be an exit scam, and doubts have been raised about the group’s claims and activities. Notably, the group has targeted Sony and NTT Docomo, but the authenticity of their involvement in these attacks has been questioned.
Summary:
The owner of the RansomedVC ransomware operation is seeking to sell the organization, offering a 20% discount to a trusted buyer. The sale includes the ransomware builder, access to affiliate groups and social media channels, as well as 37 valuable databases. The owner has cited “personal reasons” and a desire to avoid federal agency monitoring as reasons for selling. Despite attempts to contact RansomedVC, the owner did not respond. Some speculate that the sale could be an exit scam, as the owner has previously claimed to have made significant profits through scams. Selling a ransomware organization is unusual, as they typically shut down to evade law enforcement. RansomedVC has attracted attention from the infosec community due to its questionable activities and claims, including posting misleading information and engaging in smear campaigns. The legitimacy of their claimed attacks, such as targeting Sony, has been called into question. There are suspicions that RansomedVC may have taken stolen data from other attackers and passed it off as their own, or that there may be collusion between multiple attackers.