SETTRA RANSOMWARE
ID: 9763e4f3-238b-5a41-a361-719130f30088
STIX ID: report--9763e4f3-238b-5a41-a361-719130f30088
Feed Name: THE RAVEN FILE
Threat Score
This report provides a continuous analysis of the Settra ransomware group (active since June 2026), documenting its Tor-based data leak site and file servers, negotiation/chat panel, victim profiling practices, use of anti-bot (Anubis) protections and JWT cookies, observed exfiltration capability (1 GB–3 TB up to multi-TB), example ransom demands, and operational indicators such as onion domains and a sample BTC address — concluding that Settra is a capable and professional ransomware actor with ongoing activity.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.