Hades is a financially motivated ransomware group that emerged in December 2020 and is closely associated with the Russian-based cybercrime syndicate Evil Corp, also known as Indrik Spider. The group began using Hades ransomware as a successor to WastedLocker, another Evil Corp-developed ransomware, primarily to evade international sanctions imposed by the U.S. Treasury Department in December 2019. Hades operates as a private, human-operated ransomware, contrasting with the Ransomware-as-a-Service (RaaS) model, which indicates a highly engaged and hands-on approach by its operators. This group distinguishes itself by meticulously selecting high-value targets, typically large organizations with annual revenues exceeding $1 billion, to maximize financial gain. Hades is also referred to by the alias "Phoenix Locker." Unique operational characteristics include the use of customized Tor victim sites and Tox instant messaging for direct communication, diverging from centralized leak sites, a

Aliases del actor

GOLD WINTERPhoenix LockerHades LockerWildFire Locker ransomwareHade ransomwareTimosaraHackerTermTimberwormMAGNALLIUMElfinRefined KittenHolmiumAPT33G0064StonedrillDownloaderkeyloggerIsrael Electric Companypáginas falsas en FacebookEvil CorpG0092WastedLockerName 2Name 3Name 4Name 5Name 6Name 7LecnaBARYSSolarWinds Orion API (CVE-2020-10148)SUPERNOVAse relaciona con dominios

Actores similares

NoNameransomware · 0nonameactor · 2Match Legitimate Resource Name or Locationactor · 1noname057-16actor · 1name-1actor · 1name-spaceactor · 1NoName057apt · 0[Unnamed group]apt · 0Unnamed Actorapt · 0tridentlockerransomware · 6

Paises afectados

URLs nuevas detectadas en IntelTracker