All Threat Groups
ID: alphv
Alphv Syndicate Dossier
First Intercepted
2021-09-09
Latest Disclosure
2024-03-03
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
Active from November 2021 until an exit scam in March 2024, ALPHV pioneered enterprise ransomware engineering in Rust, providing a highly customizable payload for Windows, Linux, and VMware ESXi environments. The cartel targeted critical infrastructure, healthcare, defense, and technology conglomerates internationally, notorious for conducting the catastrophic Change Healthcare compromise. Initial access relied on credential theft from brokers and edge appliance exploitation, combined with aggressive triple extortion tactics incorporating stolen data leaks, DDoS attacks, and regulatory complaints to the SEC.
Tactics, Techniques & Procedures (MITRE ATT&CK)
T1190: Exploit Public-Facing Application T1078: Valid Accounts T1059.001: PowerShell T1047: Windows Management Instrumentation T1021.002: SMB/Windows Admin Shares T1562.001: Disable or Modify Tools T1490: Inhibit System Recovery T1486: Data Encrypted for Impact T1567.002: Exfiltration to Cloud Storage T1498: Network Denial of Service T1070.004: File Deletion
Known Dark Web Infrastructure & Mirrors
alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion
OFFLINE
alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion
OFFLINE
2cuqgeerjdba2rhdiviezodpu3lc4qz2sjf4qin6f7std2evleqlzjid.onion
OFFLINE
vqifktlreqpudvulhbzmc5gocbeawl67uvs2pttswemdorbnhaddohyd.onion
OFFLINE
alphvuzxyxv6ylumd2ngp46xzq3pw6zflomrghvxeuks6kklberrbmyd.onion
OFFLINE
Disclosed Victims & Incident Archive (885)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2024-03-03 | ipmaltamira | General | -- |
| 2024-03-03 | Ewig Usa | General | -- |
| 2024-03-02 | SBM & Co [You have 48 hours. Check your e-mail] | General | -- |
| 2024-03-01 | SBM & Co | General | -- |
| 2024-03-01 | Petrus Resources Ltd. | General | -- |
| 2024-03-01 | Kumagai Gumi Group | General | -- |
| 2024-02-29 | Allan Berger & Associates | General | -- |
| 2024-02-28 | Change Healthcare - Optum - UnitedHealth | General | -- |
| 2024-02-27 | verbraucherzentrale hessen | General | -- |
| 2024-02-27 | Electro Marteix | General | -- |
| 2024-02-26 | Angeles Medical Centers | General | -- |
| 2024-02-26 | S+C Partners | General | -- |
| 2024-02-24 | Worthen Industries [FULL DATA] | General | -- |
| 2024-02-23 | Family Health center | General | -- |
| 2024-02-23 | ANDFLA SRL | General | -- |
| 2024-02-22 | Hardeman County Community Health Center | General | -- |
| 2024-02-22 | Worthen Industries [We're giving you one last chance to save your business] | General | -- |
| 2024-02-21 | KHSS (You have 3 days) | General | -- |
| 2024-02-21 | Austen Consultants | General | -- |
| 2024-02-18 | VSP Dental | General | -- |
| 2024-02-16 | LoanDepot | General | -- |
| 2024-02-16 | Prudential Financial | General | -- |
| 2024-02-15 | Rush Energy Services Inc [Time's up] | General | -- |
| 2024-02-15 | ASA Electronics [2.7 TB] | General | -- |
| 2024-02-13 | Trans-Northern Pipelines | General | -- |
| 2024-02-13 | ArcisGolf | General | -- |
| 2024-02-13 | The Source | General | -- |
| 2024-02-13 | New Indy Containerboard | General | -- |
| 2024-02-13 | Procopio | General | -- |
| 2024-02-13 | Herrs | General | -- |
| 2024-02-12 | Rush Energy Services Inc [You have 48 hours] | General | -- |
| 2024-02-12 | SERCIDE | General | -- |
| 2024-02-12 | Lower Valley Energy, Inc | General | -- |
| 2024-02-10 | maddockhenson | General | -- |
| 2024-02-09 | Grace Lutheran Foundation | General | -- |
| 2024-02-08 | Jewish Home Lifecare | General | -- |
| 2024-02-05 | Vail-Summit Orthopaedics & Neurosurgery | General | -- |
| 2024-01-31 | Hydraflow | General | -- |
| 2024-01-31 | SportsMEDIA Technology | General | -- |
| 2024-01-30 | TECHNICA - HACKED AND MORE THEN 300 GB DATA LEAKED! | General | -- |
| 2024-01-29 | Dutton Brock | General | -- |
| 2024-01-26 | Draneas Huglin Dooley LLC | General | -- |
| 2024-01-24 | Brightstar Care | General | -- |
| 2024-01-24 | MBC Law Professional Corporation | General | -- |
| 2024-01-23 | FULL LEAK! Busse & Busee, PC Attorneys at Law | General | -- |
| 2024-01-23 | Total Air Solutions | General | -- |
| 2024-01-23 | Herrs (You have 72 hours) | General | -- |
| 2024-01-22 | ANS COMPUTER [72hrs] | General | -- |
| 2024-01-20 | Worthen Industries [You have three days] | General | -- |
| 2024-01-19 | Busse & Busee, PC Attorneys at Law | General | -- |
| 2024-01-12 | Builcore | General | -- |
| 2024-01-11 | R Robertson Insurance Brokers | General | -- |
| 2024-01-11 | automotionshade.com | General | -- |
| 2024-01-11 | SHIBLEY RIGHTON | General | -- |
| 2024-01-11 | Ursel Phillips Fellows Hopkinson | General | -- |
| 2024-01-11 | Triella | General | -- |
| 2024-01-10 | Group Bogart | General | -- |
| 2024-01-08 | Erbilbil Bilgisayar | General | -- |
| 2024-01-02 | SAED International | General | -- |
| 2023-12-30 | Clearwinds | General | -- |
| 2023-12-29 | Erbilbil Bilgisayar (You have 72 hours) | General | -- |
| 2023-12-29 | Okada Manilla | General | -- |
| 2023-12-29 | Nej Inc was hacked | General | -- |
| 2023-12-28 | Wesgar Inc. | General | -- |
| 2023-12-27 | FIRST 5 Santa Clara County | General | -- |
| 2023-12-27 | Aura Engineering, LLC | General | -- |
| 2023-12-27 | Ultra Intelligence & Communications | General | -- |
| 2023-12-24 | Prefeitura Municipal de Itabira | General | -- |
| 2023-12-23 | PriceSmart | General | -- |
| 2023-12-22 | VF Corporation | General | -- |
| 2023-12-20 | Navigation Financial Group | General | -- |
| 2023-12-19 | Viking Therapeutics | General | -- |
| 2023-12-18 | Viking Therapeutics reported to the SEC following a breach | General | -- |
| 2023-12-16 | E & J Gallo Winery | General | -- |
| 2023-12-13 | Advantage Group International | General | -- |
| 2023-12-13 | LeClair Group | General | -- |
| 2023-12-06 | Deutsche Energie-Agentur | General | -- |
| 2023-12-05 | TraCS Florida FSU | General | -- |
| 2023-12-05 | Henry Schein Inc - Henry's " LOST SHINE " | General | -- |
| 2023-12-05 | CLATSKANIEPUD | General | -- |
| 2023-12-04 | Tipalti | General | -- |
| 2023-12-04 | Evnhcmc | General | -- |
| 2023-12-03 | Tipalti claimed as a victim - but we'll extort Roblox and Twitch, two of their affected cl | General | -- |
| 2023-12-03 | Tipalti claimed as a victim - but we'll extort Roblox, one of their affected clients, indi | General | -- |
| 2023-12-02 | Lisa Mayer CA, Professional Corporation | General | -- |
| 2023-12-02 | royaleinternational.com | General | -- |
| 2023-12-01 | IRC Engineering | General | -- |
| 2023-12-01 | Dörr Group | General | -- |
| 2023-11-30 | HTC Global Services | General | -- |
| 2023-11-29 | AQIPA | General | -- |
| 2023-11-28 | China Petrochemical Development | General | -- |
| 2023-11-27 | Fischione Instruments Inc. | General | -- |
| 2023-11-27 | Vertex Resource Group | General | -- |
| 2023-11-27 | sillslegal | General | -- |
| 2023-11-24 | Hampton Newport News CSB | General | -- |
| 2023-11-24 | LCA Consultores | General | -- |
| 2023-11-24 | Spectrum Solutions LLC | General | -- |
| 2023-11-24 | TJM PRODUCTS PTY. LTD | General | -- |
| 2023-11-23 | Eckell Sparks Law Firm | General | -- |
| 2023-11-22 | Fidelity National Financial | General | -- |
Showing 100 most recent disclosures of 885 total records. Use the Live Feed or API for complete records.