Clop, also known as Cl0p, is a financially motivated cybercriminal organization that emerged in February 2019 as a variant of the CryptoMix ransomware family. Initially focused on file encryption, the group rapidly adopted a double extortion model in 2020 and has since evolved to prioritize data theft and pure extortion, often forgoing file encryption in favor of exfiltrating sensitive information and threatening its public release. Operating under a Ransomware-as-a-Service (RaaS) model, the group is widely believed to be Russian-speaking, originating from or operating out of Russian-speaking regions or Commonwealth of Independent States (CIS) countries, with its malware designed to avoid systems with CIS-country keyboard layouts or Russian language settings. A distinguishing characteristic of Clop is its aggressive exploitation of zero-day vulnerabilities in managed file transfer (MFT) software, enabling it to compromise numerous organizations simultaneously and achieve substantial fi

Aliases del actor

Cl0pKe3changMiragePlayful DragonRoyal APTVixen Pandaapt15

Actores similares

apt-camarodragonactor · 1apt-dragonokactor · 1apt-sharppandaactor · 1apt-twistedpandaactor · 1Aoqin Dragonapt · 1Mustang Pandaapt · 1Night Dragonapt · 1APT27 (Emissary Panda)actor · 1Putter Pandaapt · 1Stone Pandaapt · 0

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker