rebornvc, also known as RansomedVC2, represents a rebranded iteration of the RansomedVC ransomware operation, which first emerged in August 2023. While the original RansomedVC claimed to cease operations in November 2023 following arrests, rebornvc/RansomedVC2 has continued activity under new leadership, extending its campaigns into 2025. This group is financially motivated, employing a data extortion model that notably leverages the threat of General Data Protection Regulation (GDPR) fines against victims to compel ransom payments. This unique approach, combined with an initially well-orchestrated public relations campaign, distinguishes rebornvc and its predecessors from other ransomware groups by exploiting regulatory compliance as a primary pressure tactic.

Paises afectados

URLs nuevas detectadas en IntelTracker