RansomVC
Aliases: Ransomed.vc
- First seen
- 2023-01-01 00:00:00
- Primary motivation
- financial-gain
- Sophistication
- intermediate
- Resource level
- organization
- Actor type
- criminal
- Profile updated
- 2026-07-07 12:05:45
Targeted industries: financial-services professional-services technology-and-telecommunications retail-and-hospitality
Context
Ransomed.VC burst onto the scene with a well-orchestrated PR campaign, encompassing a clearnet site and multiple communication channels including Telegram and Twitter/X profiles. Their operations are heavily inclined towards exploiting GDPR penalties as a method of extortion, threatening victims with potential legal repercussions in case of data leaks.
Reports & references
- therecord.media — Colonial Pipeline Attributes Ransomware Claims To Unrelated Third Party Breach (report)
- socradar.io — On The Horizon Ransomed Vc Ransomware Group Spotted In The Wild (report)
- sentinelone.com — Sep 2023 Cybercrime Update New Ransomware Threats And The Rising Menace Of Telegram (report)
- socradar.io — Unmasking Usdod The Enigma Of The Cyber Realm (report)
- videogameschronicle.com — A Ransomware Group Claims To Have Beached All Sony Systems (report)
- securityaffairs.com — Ransomed Vc Sony Ntt Alleged Attacks (report)
- Cisco Talos — Threat Source Newsletter Sept 28 2023 (report)
- resecurity.com — Ransomedvc In The Spotlight What We Know About The Ransomware Group Targeting Major Japanese Businesses (report)