utc

moneymessage

ThreatLabz

activecrime

Money Message emerged in March 2023 targeting Windows and Linux systems across banking, transportation, and professional services sectors, demanding ransoms in the millions and publishing stolen data on their blog if unpaid, with most known victims based in the US.

observed victims (by country)

United States

observed sectors

HealthcareTransportationEnergy & UtilitiesNot Found

5 victims · last active 28 Aug 2026

recent activity · our intel

moneymessage → ProCare28 Aug 2026 moneymessage → Yourway Transportation25 Jul 2026 moneymessage → Indigo Energy23 Jul 2026

source: ransomware.live1 refs →

FAQ2

Which operating systems does the Money Message ransomware group target?

The Money Message group compromises both Windows and Linux systems.

What does Money Message do if the ransom is not paid?

If payment is not made, the Money Message group publishes stolen data on their blog.

moneymessage

moneymessage

FAQ2

See also6

moneymessage

moneymessage

FAQ2

See also6