Slug is a very obscure ransomware or extortion group with only a single documented victim (AerCap, the aircraft leasing company) recorded on ransomware tracking platforms; no detailed threat intelligence reports exist for this group.
There are no known specific TTPs, tools, or ransomware samples attributed to the Slug group in open-source intelligence.
Based on the single known victim (AerCap), it is presumed to target large corporate entities, but there is insufficient data to determine its specific targeting patterns.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.