FunkSec – Alleged Top Ransomware Group Powered by AI
ID: 114b1bcb-e8a3-5035-a561-86ae53088b6a
STIX ID: report--114b1bcb-e8a3-5035-a561-86ae53088b6a
Feed Name: Check Point Research
Threat Score
This report analyzes the emergent FunkSec group—an apparent RaaS-style ransomware operation active since late 2024 that published over 85 claimed victims—covering its public leak site, custom Rust encryptor (with .funksec extension), auxiliary tools (DDoS, HVNC, scraping), actor personas linked to Algeria, evidence of AI-assisted development, technical TTPs (privilege escalation, disabling Defender, deleting shadow copies), provided IOCs (sample hashes), and cautions that some leaks may be recycled or unverifiable.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.