THREAT ACTOR: Yanluowang ransomware group
Yanluowang - named after the Chinese and Buddhist mythological figure Yanluo Wang, but leaked chat data in Oct. '22 revealed those involved in the organization spoke in Russian. The leak appears to have shut down the group for the time in Nov '22.
Incidents Associated with this Threat
- May 24, 2022: Cisco Hit in Cyber Attack, Data Taken
Malware Used by this Threat Actor
No malware identified for this threat actor.