Ranion is a ransomware-as-a-service (RaaS) operation that first emerged in February 2017, offering its customizable ransomware to cybercriminals through dark web portals. The group behind Ranion notably claimed their product was for 'educational purposes only' while actively selling access to their ransomware distribution network. Ranion's malware is based on the open-source HiddenTear ransomware, suggesting a low-cost, accessible entry point for aspiring threat actors rather than a highly resourced state-sponsored group. This characteristic distinguishes Ranion as a foundational tool for a broad range of financially motivated cybercriminals. While it does not operate under widely recognized aliases, it is frequently referred to within the cybersecurity community as 'Ranion RaaS'.

URLs nuevas detectadas en IntelTracker