Key Group: another ransomware group using leaked builders
Oct. 1, 2024, 8:53 p.m.
Description
Key Group is a financially motivated ransomware group primarily targeting Russian users. They use various leaked ransomware builders including Chaos, Xorist, Annabelle, Slam, RuRansom, UX-Cryptor, Hakuna Matata, and Judge/NoCry. The group's activity has been tracked since April 2022, with their tactics evolving over time. They deliver malware through multi-stage loaders, often using GitHub repositories for distribution. Key Group employs various persistence methods and primarily communicates with victims via Telegram. The group is suspected to be a subsidiary project of the Russian-speaking 'huis' group, known for spam raids on Telegram channels.
Tags
Date
- Created: Oct. 1, 2024, 7:48 p.m.
- Published: Oct. 1, 2024, 7:48 p.m.
- Modified: Oct. 1, 2024, 8:53 p.m.
Additional Informations
- Russian Federation