NoName (CosmicBeetle) is a ransomware group active since 2020, known for using ScRansom ransomware and RansomHub RaaS.
NoName (also tracked as CosmicBeetle) is a ransomware group active since at least 2020, primarily targeting small and medium-sized businesses globally. Key TTPs include the deployment of custom ScRansom ransomware, exploitation of vulnerabilities such as EternalBlue and ZeroLogon, and acting as a RansomHub affiliate to leverage that RaaS infrastructure. Defenders should prioritize patching for those critical vulnerabilities and monitor for IOCs associated with RansomHub.
NoName (also known as CosmicBeetle) is a ransomware group active since at least 2020 targeting small and medium-sized businesses globally using its custom ScRansom tool, exploiting vulnerabilities like EternalBlue and ZeroLogon, and becoming a RansomHub affiliate to access that platform's RaaS infrastructure.
NoName primarily exploits vulnerabilities such as EternalBlue and ZeroLogon.
NoName acts as an affiliate of the RansomHub RaaS platform to leverage its infrastructure.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.