Chort is a newly identified English-speaking ransomware group, also known by the aliases Chort RS Group, Chort Ransomware, and ChortLocker. The name 'Chort' means 'Devil' in Russian, which aligns with common naming conventions for such groups. The group likely began operations in September 2024, with its data leak site (DLS) becoming active by October 29, 2024, and a Telegram channel established on November 15, 2024. Chort primarily focuses on financially motivated double extortion, exfiltrating sensitive data from victims before encrypting their files and demanding a ransom for data decryption and safe return. A notable characteristic of their early activity is a particular focus on the United States education sector.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker