National Hazard Agency

The National Hazard Agency is a newly identified malware group reportedly led by a man in his 20s from Ukraine. This malicious software, or malware, is designed to infiltrate and damage computer systems, often without the user's knowledge. The group uses suspicious downloads, emails, or websites to gain access to systems, where they can then steal personal information, disrupt operations, or hold data hostage for ransom. In a recent attack, the group deviated from the typical modus operandi of similar cybercriminal organizations, such as Lockbit. They delivered a ransom note titled "National Hazard Agency," demanding $3 million in either Bitcoin or Monero. The note threatened repeated attacks if the ransom was not paid and included email and instant messaging contact details. The message was fairly standard for this type of cybercrime, stating that the victim's data had been encrypted. Further evidence of their activities came to light when an affiliate of the criminal gang, also identifying itself as the National Hazard Agency, shared screenshots on Twitter of directory listings purportedly showing stolen files. This suggests that the group is not only capable of executing sophisticated cyberattacks but is also willing to publicly share proof of their exploits, adding another layer of threat to their actions.