raworld
ragroup
RA Group, also known as RA World, first surfaced in April 2023, utilizing a custom variant of the Babuk ransomware.
source: ransomware.live1 refs →
raworld
crime
FAQ2
What ransomware family does RA Group use?
RA Group (or RA World) uses a custom variant of the Babuk ransomware.
What indicators should defenders monitor for against RA Group?
Defenders should monitor for Indicators of Compromise (IOCs) associated with Babuk ransomware and focus on detecting lateral movement within the network.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.