Dark Power emerged in January 2023 as a ransomware group written in the Nim programming language, claiming 10 victims across eight countries within its first month across agriculture, education, healthcare, IT, and manufacturing sectors, demanding $10,000 ransoms payable in Monero. Known victims: 10 1 ransom note(s) on file
Objectives
Executive Summary
Dark Power is a medium-sophistication ransomware group targeting multiple sectors for financial gain through Monero-based ransoms.
Goals & Targeting
Dark Power targets sectors with potentially less robust defenses to maximize financial gain. The diverse attack surface indicates an effort to exploit varied vulnerabilities for rapid victim acquisition and ransom collection.
Enhanced Description
Dark Power emerged in January 2023 as a Nim-based ransomware group, rapidly targeting industries including agriculture, education, healthcare, IT, and manufacturing. Within the first month, they attacked ten victims across eight countries, demanding $10,000 in Monero. Their initial operations suggest a focus on quick monetization through broad sector targeting.
Key Capabilities
Software / Tooling
Campaigns & Victims
Dark Power initiated operations in January 2023, quickly affecting a global spread across multiple sectors. Their campaigns demonstrate adaptability and efficiency, focusing on rapid victimization to escalate their operations within a short timeframe.
Recommended Actions
Suggested Tags
Confidence Assessment
Low confidence due to limited historical data and campaign specifics. Further monitoring for long-term patterns and toolset evolution is essential.
No techniques linked yet.
No tools linked yet.
No campaigns linked yet.
No observed data linked yet.
No IOCs linked yet.
No references recorded yet.
0
Techniques
0
Tools
0
Campaigns
0
IOCs
0
Observed Data
0
Tactics