Werewolves

The Werewolves group, a new entrant into the malware scene, has been identified as a significant threat due to its use of LockBit3 ransomware and leaked Conti source code. The group, which was first reported by Russian cybersecurity firm F.A.C.C.T. in November 2023, began its operations in June 2023, primarily targeting Russian entities. Since their inception, they have expanded their reach to include victims in the U.S. and Europe, with a total of 26 known targets to date. Their activities have seen them rise rapidly through the ranks of ransomware groups, entering the top three for the first time. In addition to its wide geographic spread, the Werewolves group has also made headlines for its aggressive tactics. They claim that any stolen data is subject to "a criminal legal assessment, a commercial assessment, and an assessment in terms of insider information for competitors." In one instance, the group even threatened to expose an employee at a targeted company who was allegedly searching for child sexual abuse material unless the company paid the ransom. This approach underscores the group's willingness to exploit sensitive information to achieve their objectives. Looking ahead to 2024, the cybersecurity landscape is expected to continue evolving, with the Werewolves group among those predicted to persist. Other emerging groups such as Cactus, Rhysida, 8base, Hunters International, and Akira are also being closely watched. The Cyber Express is monitoring these developments closely, highlighting the importance of vigilance against these threats. As the story continues to unfold, it will be crucial to stay informed about the latest activities of the Werewolves group and other emerging threats.