DEV-0569, also tracked by Microsoft as Storm-0569 since April 2023, is a financially motivated threat actor group that emerged around August 2022. This group specializes in deploying ransomware and engaging in extortion, notably delivering Royal ransomware and various other payloads. What sets DEV-0569 apart is its continuous innovation in initial access techniques, defense evasion, and post-compromise activities, often serving as an initial access broker for other ransomware operations. Their identity and origin are not publicly known, leading Microsoft to use a temporary 'DEV-####' designation for them. The group is known for its rapid deployment methods, utilization of commodity malware, and extensive use of obfuscation.

Aliases del actor

Storm-0569ContiQuantumBlack ByteDiavolBlack BastaRyuk (como FIN12)

Actores similares

blackbastaransomware · 523blackbyteransomware · 147BlackBastaactor · 2blackbyte-cruxactor · 1blacksuitransomware · 184blacknevasransomware · 16blackwaterransomware · 11black-xactor · 8blackshrantacransomware · 8blackoutransomware · 5