North Korean hacking organization Andariel.
Kimsuky and Andariel are some of the North Korean hacker groups whose activities focus on espionage and attacks on the cryptocurrency industry.

Brain Cipher is a new ransomware operation launched in June 2024, conducting attacks on organizations worldwide.

Brain Cipher will breach a corporate network and spread laterally to other devices. Once the threat actors gain Windows domain admin credentials, they deploy the ransomware throughout the network.

In latest hack the data encryptor is based on the leaked LockBit 3 encryptor, thoroughly analyzed in the past, unless Brain Cipher tweaked the encryption algorithm, there are no known ways to recover files for free.

The group, tracked as “Sticky Werewolf,” is suspected of having geopolitical and/or hacktivist motivations has been linked to cyber campaigns targeting public organizations in Russia and Belarus since at least April 2023.

BlackSuit emerged in May 2023 and mainly targets US companies in the education and industrial goods sectors. BlackSuit uses a double-extortion method and other tactics, techniques, and procedures (TTPs) that reflect a maturity atypical of a group that’s only been around for a year. This reflects its origin in Royal, which in turn was comprised of members of the formidable and now-defunct Conti ransomware gang.

Ransomexx ransomware group is a Human-Operated Ransomware (HumOR) that has existed since May 2020.