J, also known as J Group, emerged as a new ransomware group in early 2025, launching its data leak site in May 2025. This group operates as a cybercriminal cartel primarily focused on double extortion through data exfiltration and public leakage. Their primary motivation is financial gain, monetizing stolen data even if ransom negotiations fail. J Group's behavior indicates an evolving modus operandi, as they are still establishing their operational procedures, and have been observed to adopt data brokerage as a common approach. They are often characterized as a leak-site-centric extortion identity, distinguishing themselves by attempting to sell data publicly rather than solely relying on encryption-based ransom payments.

Aliases del actor

Putter PandaPLA Unit 61486TG-6952técnicasPLA Unit 61398 (Unidad 61398 del Ejército Popular Liberador)TG-8223APT1BrownFoxGroup 3GIF89aShadyRATByzantine CandorG0006Gothic PandaTG-0110lo que sugiere una operativa bien organizadaNumbered PandaTG-2754 reflejan su conexión con actividades de espionajeciberespionajeG0023ELMER backdoorGh0stHTRANUNICATPoison IvyPandoraDeep PandaWebMastersApt19KungFu KittensGroup 13Sh3llCr3w

Actores similares

Conquerors Electronic Armyapt · 0Operation DRBControlapt · 0PhantomControlapt · 0Eloquent Pandaapt · 0apt-desertfalconactor · 1Desert Falconsapt · 0apt-stealthfalconactor · 1Confuciousapt · 0LUNAR SPIDERapt · 0Water Bakunawaapt · 0

Paises afectados

URLs nuevas detectadas en IntelTracker