BlackCat / ALPHV

ALPHV Noberus UNC4466

▲ High Threat

Change Healthcare attack ($22M ransom), MGM Resorts, ALPHV exit scam (2024)

Origin Russia

Sponsor Financially motivated criminal group

Active Since 2021

Motivation Financial gain (ransomware)

Target Sectors

Healthcare Finance Legal Technology Critical infrastructure

Rust-based ransomware

Triple extortion

Data exfiltration before encryption

ESXi attacks

Affiliate model

Hacking the mainframe…