Chort is a double-extortion ransomware group that emerged in October 2024, primarily targeting US education and government sectors.
Analyst brief
Chort is a double-extortion ransomware group that emerged in October 2024, with its name meaning 'Devil' in Russian. It primarily targets the US education and government sectors, with notable victims like the City of Sheboygan and Kuwait's Ministry of Finance. Their TTPs include ransomware for data encryption and exfiltration. Defenders should focus on robust backup strategies, network segmentation, and monitoring for data exfiltration.
chort
crime
Chort is a double-extortion ransomware group (whose name means "Devil" in Russian) that emerged in October 2024, primarily targeting US education and government sectors, with notable victims including the City of Sheboygan and Kuwait's Ministry of Finance.