MoneyMessage is a ransomware group that emerged in March 2023, demanding multi-million dollar ransoms from its victims. The group primarily operates a double extortion model, encrypting data and subsequently threatening to publish stolen sensitive information on a dedicated leak site if ransom demands are not met. A distinguishing characteristic of MoneyMessage is its ransomware variant's tendency not to alter file extensions on encrypted files, instead dropping a plain text ransom note named `money_message.log` in affected directories. The group targets a wide array of organizations globally, focusing on large corporations across various sectors, and is known for its ability to target both Windows and Linux operating systems, including VMware ESXi servers.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker