ZeroFox Intelligence Flash Report - ALPHV Extortion Campaigns Continue into 2024

Product Serial: F-2024-02-16a

TLP:CLEAR

In this flash report, ZeroFox researchers report on the continued digital extortion campaigns being conducted by collective ALPHV, who experienced significant law enforcement disruption in December 2023.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

Ransomware and digital extortion (R&DE) collective ALPHV is continuing extortion campaigns in 2024, with its attack tempo very likely back on an upward trajectory following a recent disruption.
Since the law enforcement (LE) activity reported by ZeroFox on December 19, 2023, the proportion of ALPHV attacks targeting entities based in North America has increased significantly—from a 2023 average of approximately 59 percent up to 85 percent.
It is likely that the specific targeting of North America, as well as the increasing attack tempo, contributed to the U.S. Department of State offering a series of financial rewards for related information on February 15, 2024.
ALPHV attacks are very likely to continue over the next two months, targeting mostly North America-based organizations. There is a roughly even chance that the current upward trajectory in activity will plateau or decline as a result of continued LE attention and scrutiny.