Karma is a ransomware group that first emerged in June 2021, operating a double extortion model by encrypting victim files and threatening to leak exfiltrated data. The group is characterized by the rapid evolution and continuous adaptation of its ransomware strains, with researchers observing multiple updated versions in its early months of activity. While distinct from a group of the same name active in 2016, Karma ransomware has shown code similarities to and is considered an evolutionary step in a lineage of ransomware families including JSWorm, Nemty, Nefilim, Milihpen, and Gangbang. Its primary motivation is financial gain through ransom payments. A notable incident involved Karma conducting a data theft and extortion operation against a healthcare provider, only for another ransomware group, Conti, to later encrypt Karma's own extortion notes on the same network.

Aliases del actor

CactusPeteTonto TeamBisonalLone Rangerotros mencionados en fuentes OSINT verificadasaa22-264abanished kittenhomeland justicered sandstormstorm-0842void manticoreBisonal (malware)Dissident groupsotros referencias en inteligencia de amenzas

Actores similares

BANISHED KITTENapt · 0Fox Kittenapt · 1Charming Kittenactor · 1cutting-kittenactor · 1clever-kittenactor · 1charming-kittenactor · 1rocket-kittenactor · 1flash-kittenactor · 1domestic-kittenactor · 1fox-kittenactor · 1

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker