Avos is a criminal group operating AvosLocker ransomware under a RaaS model since 2021.
Avos is a criminal group operating the AvosLocker ransomware under the RaaS (Ransomware-as-a-Service) model since June 2021. They target critical infrastructure sectors, including financial services, manufacturing, and government, primarily in the US and over a dozen other countries. Their TTPs involve ransomware deployment, likely coupled with data theft for double extortion. Defenders should focus on vulnerability management in critical systems, robust network segmentation, and regular offline backup verification.
Avos is the threat actor group behind AvosLocker ransomware, a RaaS operation active since June 2021 that recruited affiliates to deploy ransomware against critical infrastructure including financial services, manufacturing, and government sectors across the US and a dozen other countries.
Avos is the criminal group operating the AvosLocker ransomware since June 2021.
Avos likely uses a double extortion tactic, combining ransomware attacks with data theft.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.