Synapse Ransomware emerged in February 2024, operating under a Ransomware-as-a-Service (RaaS) model and leveraging code functionalities potentially derived from the leaked Babuk Ransomware source code. This group distinguishes itself by using an onion-based service for ransom negotiations with affiliates, rather than a traditional data leak site, and notably incorporates checks for system time zone and language to avoid encrypting systems identified as being in Iran. The group's primary motivation is financial, targeting organizations for higher ransom payouts through aggressive tactics, including double extortion.

Actores similares

lockbit3ransomware · 2016qilinransomware · 1933akiraransomware · 1524playransomware · 1268clopransomware · 1254lockbit2ransomware · 1002ransomhubransomware · 842incransomransomware · 832alphvransomware · 731dragonforceransomware · 580