Cactus ransomware gang
Threat Actor
The Cactus ransomware operation launched in March 2023 and has since amassed numerous companies that they claim were breached in cyberattacks.
Like all ransomware operations, they breach corporate networks through purchased credentials, partnerships with malware distributors, phishing attacks, or by exploiting vulnerabilities.
Incidents Associated with this Threat
- February 13, 2025: Cyberattack at Media Conglomerate Urban One
- December 12, 2024: Ransomware Attack at Cornwell Tools
- February 15, 2024: Ransomware at Logistics Company AB Texel in The Netherlands
- January 17, 2024: Schneider Electric Sustainability Business Hit by Cactus Ransomware Gang
Malware Used by this Threat Actor
No malware identified for this threat actor.