FunkSec is a newly identified ransomware group targeting media, IT, and education sectors.
Analyst brief
FunkSec is a newly identified extortion group claiming 11 victims across media, IT, and education, using a Tor-based DLS to centralize its ransomware activities. The group advertises a free DDoS tool and may develop its own ransomware binary, though limited TTP information is currently available. Defenders should be vigilant for suspicious extortion emails, monitor for DLS-related indicators, and watch for unknown ransomware binaries, especially in the targeted sectors.
FunkSec
unknown
Funksec is a newly identified extortion group that has claimed 11 victims across various sectors, including media, IT, and education, operating a Tor-based DLS to centralize its ransomware activities. The group advertises a free DDoS tool and may develop its own ransomware binary, indicating significant technical capability. The DLS was likely created in late November to early December 2024, with the first advertisement titled “Funksec Ransomware” posted on 3 December 2024. Currently, there is limited publicly available information on Funksec's TTPs, and it is not known to be associated with any other threat groups.