Ransomware Rust Active since 2021

ALPHV

ALPHV BlackCat Rust based RaaS. Tor onion negotiation. wmic csproduct UUID VM detection. Node.js embedded runtime. JSON configuration.

Threat Profile
Type Ransomware
Programming LanguageRust
C2 ProtocolHTTPS/TOR
First Seen2021
Targets Kurumsal/Saglik
Purpose / Capabilities
  • Ransomware (RaaS)
No C2 servers have been identified for this family yet.

Research Reports (2)

Critical

ALPHV BlackCat -- 2cuqgeerjdba2rhd Tor Onion URL, wmic csproduct UUID VM Tespiti, Node.js Gömülü Runtime, Konfigürasyon Yapısı | Kritik

ALPHV BlackCat 3MB. 2cuqgeerjdba2rhdiviezodpu3lc4qz2sjf4qin6f7std2evleqlzjid.onion Tor. wmic csproduct get UUID VM tespiti. Node.js gömülü. Config alanlari.

Read Report →
Critical

ALPHV/BlackCat Ransomware -- 5.7MB Rust ELF, Linux Hedef, Rust Mangled Symbols | Kritik

ALPHV BlackCat 5.7MB Rust Linux ELF. Rust mangled symbols. Cok platform (Windows/Linux/ESXi).

Read Report →