Dark Project is a newly emerged ransomware leak operation active as of August 2026. The group utilizes a double extortion model (stealing sensitive data before encrypting local systems and threatening to leak it on their dark web portal).
observed victims (by country)
United StatesUnited KingdomPhilippinesGermany
observed sectors
ManufacturingHealthcareProfessional ServicesNot Found
What tactic does the Dark Project ransomware group use to pressure its victims?+
Dark Project uses a double extortion model, exfiltrating sensitive data before encrypting systems and threatening to leak it on their dark web portal.
What should defenders focus on to counter the common initial access vectors used by Dark Project?+
Defenders should focus on detecting data exfiltration, monitoring for network anomalies, and strengthening controls against common initial access vectors such as phishing and exposed RDP.