ALPHV/BlackCat
Also known as: BlackCat, Noberus, Cicada3301
Overview
Sophisticated RaaS group that pioneered Rust-based ransomware. After apparent exit scam in 2024, affiliates regrouped under Cicada3301 and RansomHub brands.
MITRE ATT&CK Coverage
Recon
Res Dev
Init Access
Execution
Persistence
Priv Esc
Def Evasion
Cred Access
Discovery
Lat Move
Collection
C2
Exfil
Impact
2 of 14 tactics observed
Raw TTPs
Rust RansomwareESXi TargetingTriple ExtortionAffiliate ProgramSEC Reporting Abuse