Rancoz is a ransomware group that first emerged in November 2022, operating with a financial motivation through double extortion tactics. The group distinguishes itself by leveraging a combination of NTRUEncrypt, a post-quantum algorithm, and ChaCha20-Poly1305 for its encryption processes. Rancoz primarily targets virtualization platforms such as Proxmox to maximize operational disruption by encrypting multiple virtual machines simultaneously. Although sharing code similarities with Vice Society ransomware, no direct link has been established; however, Rancoz is assessed to be from the same developer as Buddy ransomware.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker