DarkRaaS
- Primary motivation
- financial-gain
- Sophistication
- advanced
- Resource level
- organization
- Actor type
- criminal
- Profile updated
- 2026-07-07 12:18:42
Targeted industries: government-and-public-sector education-and-nonprofits energy-and-utilities technology-and-telecommunications
Targeted regions: country_code:il country_code:ae country_code:tr
Context
DarkRaaS is a threat actor specializing in selling unauthorized access to various organizations' systems and networks across multiple countries, with a recent focus on targets in Israel, UAE, Turkey, and South America 4 9 20. The group has been operating for at least six years and typically offers access to sensitive data, internal systems, and infrastructure, with prices ranging up to $25,000 for VPN access 4 9. Their targets span various sectors including government institutions, educational facilities, oil and gas companies, and IT organizations, often claiming to have access to multiple terabytes of sensitive data 7 19.
Reports & references
- cyberpress.org — Darkraas Ransomware Oil Gas Company (report)
- cyberpress.org — Darkraas Ransomware Intelligence Data (report)
- dailydarkweb.net — Darkraas Allegedly Breached A Major Oil And Gas Company (report)