Sovcali is a ransomware group known for targeting the US Transportation sector with double extortion.
Sovcali is a crime-motivated ransomware/extortion group. It targets the Transportation sector in the United States. Key TTPs involve ransomware deployment and data exfiltration via a public leak site for double extortion. Defenders should focus on network segmentation, secure offline backups, and monitoring for compromised credentials.
Sovcali is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
The Sovcali ransomware/extortion group targets the Transportation sector in the United States.
Key TTPs of Sovcali include ransomware deployment and data exfiltration via a public leak site for double extortion.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.