AtomSilo is a double-extortion ransomware group known for exploiting CVE-2021-26084.
AtomSilo is a financially motivated double-extortion ransomware group that emerged in September 2021, exploiting the Atlassian Confluence vulnerability (CVE-2021-26084) for initial access and demanding ransoms of up to $1 million. The group steals sensitive data prior to encryption and threatens to leak it to pressure victims into paying. Defenders should prioritize patching Confluence instances immediately, monitoring for unusual authentication attempts, and maintaining robust offline backup strategies.
AtomSilo is a double-extortion ransomware group that emerged in September 2021, exploiting the Atlassian Confluence vulnerability (CVE-2021-26084) for initial access and demanding ransoms up to $1 million, attributed to the Chinese state-linked threat actor BRONZE STARLIGHT.
The AtomSilo group exploits the CVE-2021-26084 vulnerability in the Atlassian Confluence platform for initial access.
The AtomSilo group demands ransoms of up to $1 million from its victims.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.