Red Charon refers to a ransomware group identified in August 2025 as 'Charon ransomware', which employs advanced persistent threat (APT)-style techniques in its operations. This group is distinguished by its use of sophisticated methods, including DLL sideloading and process injection, typically associated with nation-state actors. While operating as a financially motivated ransomware entity, its tactics and potential linkages suggest an origin within China. The group's primary objective is financial gain through data exfiltration followed by encryption, leveraging double extortion tactics. It individualizes its ransom demands with custom notes for each victim, indicating targeted and carefully planned attacks.

Actores similares

redalertransomware · 2redransomwareransomware · 2Scattered Spideractor · 2redactactor · 2Scattered Lapsus$ Huntersthreat-actor · 1redcontroleactor · 1apt-redbaldknightactor · 1apt-redfoxtrotactor · 1apt-redjuliettactor · 1apt-redoctoberactor · 1