All ransomware groups
groove
13 tracked victims
·first seen 2021-09-09·last activity 2021-10-30Group profile
Groove emerged in mid-2021 as a loose criminal collective linked to former Babuk gang members, known for publicly leaking Fortinet VPN credentials to attract affiliates and calling for attacks on US government and financial targets; the group later claimed its entire operation was a hoax to mislead security researchers.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2021-10-30 | Я Я не пью виски но с ним бы выпил | Not Found | |
| 2021-10-23 | E episcopalretirement.com Возможна утечка | Healthcare | |
| 2021-10-23 | П Про русских в США | Not Found | |
| 2021-10-23 | T therecord.media 30k USD | Not Found | |
| 2021-10-22 | H hagerstownpd.org | Public Sector | |
| 2021-10-22 | T trivalleypc.com | Technology | |
| 2021-09-13 | R robinwoodortho.com | Healthcare | |
| 2021-09-10 | О Одно интервью | Not Found | |
| 2021-09-10 | У Украина и экстрадиции в США | Not Found | |
| 2021-09-09 | L ludofact.de 50 GB data stolen | Manufacturing | |
| 2021-09-09 | М Мысли о смысле | Not Found | |
| 2021-09-09 | З Запатченные fortinet точки входа | Not Found | |
| 2021-09-09 | М Мы можем просто договориться | Not Found |