Three new hacker groups, Battle Wolf, Twelfth Wolf and Shadow Wolf, were discovered to be actively using ransomware viruses (malware that encrypts data on computers and demands money for their restoration) against Russian companies. socialbites.ca learned about this from a new report from Bi.Zone, in which the listed associations were identified for the first time. According to experts, hackers have carried out more than 40 successful cyber attacks against Russia.
In particular, at least 15 large organizations in Russia were harmed by the actions of the War Wolf: scientific, industrial, state, financial and others. The Twelfth Wolf is behind the attack on one of the largest federal executive bodies of the Russian Federation, which, according to the attackers, led to the leak of confidential information. Shadow Wolf mainly attacks Russian engineering, insurance, transportation and media companies.
“Unlike the War Wolf and the Twelfth Wolf, the group operates solely for financial purposes, not political ones. Communication between a Shadow Wolf agent and the victim usually takes place on a page on the dark web; the address of this page is contained in a note demanding ransom to decrypt and delete downloaded data, ”explained Oleg Skulkin, head of Bi. District cyber intelligence department.
Skulkin also noted that a characteristic feature of all these groups is the use of ransomware viruses previously created and used by other well-known hacker associations Babuk, Conti and LockBit, behind which thousands of successful attacks around the world. Battle Wolf, Twelfth Wolf, and Shadow Wolf allegedly managed to assemble working versions of viruses from bits of source code from other people involved in the dark web during infighting in many cybercrime groups. Such conflicts between well-known hacker associations became more frequent after the start of the NWO.
“Malware source codes posted online today are very popular with cybercriminals. Open access to such tools lowers the cybercrime threshold, making attacks much cheaper and easier to organize. Even countries and industries that were not previously attacked by major criminal groups are now under attack,” said Skulkin.
previously in the USA declassified one of the most famous Russian hackers.