ZeroFox Intelligence Flash Report - New One-Time Purchase Ransomware Announced in Dark Web Forum

ZeroFox Intelligence Flash Report - New One-Time Purchase Ransomware Announced in Dark Web Forum

Product Serial: F-2024-05-30a

TLP:CLEAR

In this Flash Report, ZeroFox researchers report on a newly announced, one-time purchase English-speaking ransomware announced in the dark web forum OmniForums.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• On May 26, 2024, well-regarded actor “phant0m” announced a new ransomware tool named “SpiderX” on the English-speaking dark web forum “OnniForums”. The software, which quickly gained traction amongst other forum users, is available for a one-time purchase of USD 150.
• The announcement of SpiderX contributes to a broader upward trajectory in the number of both English-speaking and one-time purchase ransomware offerings observed in deep and dark web (DDW) marketplaces.
• While threat actors leveraging this ransomware almost certainly pose a threat to organizations across regions and industries, they are almost certainly unable to conduct attacks at the frequency or scale of larger ransomware-as-a-service RaaS groups.