Low-Drama ‘Dark Angels’ Reap Record Ransoms
ID: 0d4de35a-4893-54fa-a6b2-b1c77073438b
STIX ID: report--0d4de35a-4893-54fa-a6b2-b1c77073438b
Feed Name: Krebs on Security
Threat Score
The report profiles the Dark Angels ransomware group — a Russia-linked, low-profile extortion syndicate active since ~2021 that specializes in massive data exfiltration (often 10–100 TB), selective deployment of encryption, and operates a victim leak site called Dunghill Leak; it highlights high-profile victims (Sysco, Sabre) and reporting that a Fortune 50 company (likely Cencora) paid a record $75M ransom, situating the group as a top 2024 ransomware threat according to industry researchers.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.