DarkMatter
DarkMatter is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
source: ransomware.live1 refs →
DarkMatter
DarkMatter is a financially motivated ransomware group that exposes victims on a leak site.
Analyst brief
DarkMatter is a financially motivated ransomware group that is active and publicly lists its victims on a leak site for extortion. They primarily target corporate networks, encrypting data and demanding ransom payments. Typical TTPs include ransomware deployment, double extortion, and data exfiltration. Defenders should focus on network segmentation, immutable backups, and anomaly-based detection.
crime
FAQ2
What is the motivation behind the DarkMatter group?
DarkMatter is a financially motivated ransomware group.
What are the typical TTPs of the DarkMatter group?
Their TTPs include ransomware deployment, double extortion, and data exfiltration.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.