THREAT ACTOR: Snatch ransomware group

The Russian Snatch ransomware group uses the double extortion method; accordingly, the payload is made of ransomware and data stealer components. Threat actors use automated brute-force attacks against vulnerable applications in the target organizations. Also, the Snatch ransomware operators also use their affiliate partners to gain initial access to corporate networks.


Incidents Associated with this Threat

  • November 30, 2021: R&D Data Breach at Volvo Cars

Malware Used by this Threat Actor

No malware identified for this threat actor.

Pin It on Pinterest

Scroll to Top
Scroll to Top