alphv
Also known as: blackcatFirst seen September 9, 2021Active731 claimed victims
The claims below are reproduced as posted by alphv on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The operators of the ALPHV/BlackCat ransomware began their activity in December 2021, making posts on Dark Web forums to promote their affiliate program, offering other actors the opportunity to engage in a 'new type of ransomware family' developed from scratch using the Rust programming language. Some clear evidence indicates that the actors behind this new ransomware are not new to cybercrime, and there were links to other affiliate programs such as DarkSide, BlackMatter, and REvil.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Albany Bank and Trust Company | February 5, 2022 | ransomware_live | — |
| mainland.com.hk | February 4, 2022 | ransomware_live | — |
| Royal Laser | February 4, 2022 | ransomware_live | — |
| CGT S.p.A. | February 2, 2022 | ransomware_live | — |
| OilTanking GmbH and Mabanaft GmbH | January 29, 2022 | ransomware_live | — |
| themisautomation.com | January 29, 2022 | ransomware_live | — |
| ipec.ro | January 23, 2022 | ransomware_live | — |
| Brookson Group | January 18, 2022 | ransomware_live | — |
| Moncler | January 17, 2022 | ransomware_live | — |
| Redbadge | January 16, 2022 | ransomware_live | — |
| Detroit Stoker | January 9, 2022 | ransomware_live | — |
| The Grand Bahama Port Authority | January 7, 2022 | ransomware_live | — |
| Ballester Hermanos | January 7, 2022 | ransomware_live | — |
| FrenchGourmet | January 6, 2022 | ransomware_live | — |
| D.F. Chase | January 6, 2022 | ransomware_live | — |
| NanoFocus | January 1, 2022 | ransomware_live | — |
| CED Group | January 1, 2022 | ransomware_live | — |
| SNOP GROUP | December 30, 2021 | ransomware_live | — |
| Uriach | December 30, 2021 | ransomware_live | — |
| Unified Technologies | December 30, 2021 | ransomware_live | — |
| Solaris Management Consultants | December 30, 2021 | ransomware_live | — |
| Douglas Shaw & Associates | December 30, 2021 | ransomware_live | — |
| Hunter Douglas | hunterdouglas.com.au | December 30, 2021 | ransomware_live | — |
| Buffers USA | December 30, 2021 | ransomware_live | — |
| van Eupen Logistik | December 30, 2021 | ransomware_live | — |
| New City Commercial Corporation (NCCC) | December 30, 2021 | ransomware_live | — |
| Centaris.com | December 30, 2021 | ransomware_live | — |
| Inetum | December 20, 2021 | ransomware_live | — |
| RCMS | December 18, 2021 | ransomware_live | — |
| Strataworldwide.com | December 18, 2021 | ransomware_live | — |
| SVA Jean Rozé | September 9, 2021 | ransomware_live | — |
← NewerPage 8 of 8
Claim data from ransomware.live and RansomLook (CC BY 4.0).