Money Message is a ransomware group active since March 2023, targeting both Windows and Linux systems.
Analyst brief
Money Message is a financially motivated ransomware group that emerged in March 2023, primarily targeting organizations in the transportation, energy & utilities, and manufacturing sectors. They compromise both Windows and Linux systems, demanding multi-million-dollar ransoms and publishing stolen data on their blog if payment is not made, with the majority of known victims based in the United States. Defenders should focus on regular network segmentation audits, closing unused ports, and maintaining secure offline backups of critical data to mitigate the impact of potential ransomware attacks.
moneymessage
ThreatLabz
activecrime
Money Message emerged in March 2023 targeting Windows and Linux systems across banking, transportation, and professional services sectors, demanding ransoms in the millions and publishing stolen data on their blog if unpaid, with most known victims based in the US.