The Hades ransomware gang

Threat Actor

The Hades ransomware gang began operating in 2020. When encrypting a victim, it will create a ransom note named 'HOW-TO-DECRYPT-[extension].txt' that resembles notes used by the REvil ransomware group.

Incidents Associated with this Threat

Malware Used by this Threat Actor

No malware identified for this threat actor.