Crypto24 is a ransomware group that emerged in late 2023, characterized by its stealth and precision in conducting multi-stage attacks against high-profile enterprises. The group's primary motivation is financial gain, distinguishing itself by skillfully blending legitimate tools with custom malware and employing advanced evasion techniques during off-peak hours to avoid detection. Initially, the group used rudimentary payloads but has rapidly matured, incorporating bespoke TOR-based negotiation portals and enhanced anti-forensic routines. While not explicitly stated, language artifacts suggest multilingual operators, possibly with ties to Eastern European actors. Crypto24 is not affiliated with cryptocurrency investment fraud, despite its name, but rather leverages it for branding and payment infrastructure.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker