Uptime Hamster: 21d 12h 4mDeploy: 3 Aug 2026 06:56Updated: 2026-07-21
Logo del actor de amenaza alphv

alphv

3 incidentes 0 paises 0 sectores threat-actor RU Ultimo: 2026-06-29
Aliases: BlackCat, ALPHV, se relaciona con identificadores de Microsoft como DEV-0237, DEV-0504
Ver en IntelTracker → APTTrail →
ALPHV, also known as BlackCat or Noberus, is a financially motivated, Russian-speaking ransomware-as-a-service (RaaS) group that first emerged in November 2021. The group distinguished itself by being one of the first major ransomware operations to develop its malware in the Rust programming language, which offers cross-platform compatibility and enhanced performance. ALPHV operates by providing its highly customizable ransomware to affiliates, who then conduct attacks and share a percentage of the ransom profits with the core developers. The group is assessed with high confidence to be comprised of former members or affiliates of the defunct DarkSide and BlackMatter ransomware operations, carrying over their expertise and tactics. ALPHV is also notable for its aggressive triple extortion tactics, which include data encryption, data exfiltration with threats of public release, and sometimes Distributed Denial of Service (DDoS) attacks or direct contact with victims' customers or the pr

Aliases del actor

BlackCatALPHVse relaciona con identificadores de Microsoft como DEV-0237DEV-0504

Actores similares

devmanransomware · 184dev-0322actor · 1dev-0343actor · 1weredevilsactor · 1Network Devicesactor · 1Compromise Software Dependencies and Development Toolsactor · 1Device Driver Discoveryactor · 1CS FQL: 32. Detect Data Exfiltration via external storage devicesactor · 1DEV-0147apt · 0DEV-0586apt · 0

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
Forounknownransomware.anggipradana.comRansomware Group: alphv
Forounknowngithub.comRansomware Group: alphv
Repositoriounknowngithub.comRansom Notes: alphv (4 notes from ThreatLabz)
DLS / onionofflinealphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onionCTI.FYI
DLS / onionofflinealphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onionCTI.FYI
DLS / onionoffline2cuqgeerjdba2rhdiviezodpu3lc4qz2sjf4qin6f7std2evleqlzjid.onionCTI.FYI
DLS / onionofflinevqifktlreqpudvulhbzmc5gocbeawl67uvs2pttswemdorbnhaddohyd.onionCTI.FYI
DLS / onionofflinealphvuzxyxv6ylumd2ngp46xzq3pw6zflomrghvxeuks6kklberrbmyd.onionCTI.FYI
Webunknownwww.cisa.govOSINT
DLS / leak siteunknownthedfirreport.comOSINT
DLS / leak siteunknowncloud.google.comOSINT
DLS / leak siteunknownnews.sophos.comOSINT
CVEs relacionadas
CVE-2024-1709, CVE-2024-1708, CVE-2023-4966, CVE-2023-3284, CVE-2023-27350, CVE-2023-22515
Victimas
1
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises objetivo (OSINT)

United Arab EmiratesAlbaniaAngolaArgentinaAustriaAustraliaAzerbaijanBosnia and HerzegovinaBangladeshBelgium

Sectores objetivo (OSINT)

Construction of BuildingsFood ManufacturingOther Information ServicesSoftware PublishersTransit and Ground Passenger TransportationReal EstateHospitalsTransportation Equipment ManufacturingEnterprises & HoldingAccommodation

URLs nuevas detectadas en IntelTracker

ransomware.anggipradana.com github.com

Victimas (1)

Ransom Notes: alphv (4 notes from ThreatLabz)18 Jun 2026
Report
alphv - Ransom NotesEste grupo de ransomware tiene 4 notas de rescate documentadas en el repositorio ThreatLabz/ransomware_notes. Las notas de rescate…