logo

Dark Web Profile: 0APT Ransomware

ID: 589b9220-6295-5c4c-9694-06f514235276

STIX ID: report--589b9220-6295-5c4c-9694-06f514235276

Feed Name: SOCRadar Blog

Threat Score
45/100

Date Published: 2026-02-05

Date Updated: 2026-04-30

Author: Ameer Owda

...
...

0APT is a recently surfaced ransomware-as-a-service operation that rapidly listed hundreds of victims on a dark web leak site; however, technical analysis (0-byte files, low-quality code, linguistic indicators) suggests the group may be a scam or low-tier actor primarily using psychological pressure and fabricated exfiltration to extort victims. The report outlines their broad, opportunistic targeting across critical infrastructure, healthcare, finance and manufacturing, describes claimed cryptographic methods and negotiation channels, highlights anomalies undermining their technical credibility, and gives verification-first defensive recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.