Barracuda is an active ransomware/extortion group known for data leaks via its public leak site.
Barracuda is an active ransomware/extortion group that is tracked through victims listed on its public leak site after data exfiltration. The group primarily targets the Manufacturing, Professional Services, Healthcare, and Technology sectors in Brazil, China, the United States, and South Korea. Their TTPs involve deploying ransomware combined with double extortion tactics of data theft and public leaking. Defenders should focus on enforcing strong password policies on remote access services, maintaining rigorous patch management, and monitoring for unauthorized data exfiltration.
Barracuda is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
The Barracuda group primarily targets organizations located in Brazil, China, the United States, and South Korea.
Defenders should focus on enforcing strong password policies on remote access services, maintaining rigorous patch management, and monitoring for unauthorized data exfiltration.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.