Insomnia is a cybercriminal group that commenced operations in October 2025, distinguishing itself by focusing exclusively on data theft and extortion rather than system encryption. The group's primary motivation is financial gain through threatening public exposure of sensitive stolen data. Assessed with moderate confidence to be of Russian origin, Insomnia targets small to mid-sized organizations, predominantly within the healthcare sector, and notably avoids attacking entities in former Soviet states, aligning with typical Russian-speaking cybercrime norms. What sets Insomnia apart is its operational model emphasizing speed and low visibility, as it typically gains access via stolen credentials and authentication bypasses, then uses legitimate administrative tools for lateral movement, eschewing the deployment of traditional encrypting ransomware.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker