Scarlettgroup

ScarlettGroup is a newly observed cyber extortion gang actively threatening companies via a dark web leak site, employing countdown timers to pressure victims. Their operational TTPs include public listing of alleged breaches and a negotiation window for communications. While the group’s intrusion methods remain unverified, their public threats and activity on forums such as PwnForums indicate a growing trend in cyber extortion.

Recent activity

No posts or advisories have named this actor recently.

References

• https://cybersecuritynews.com/a-new-extortion-gang/
• https://www.cryptika.com/a-new-extortion-gang-is-naming-companies-on-the-dark-web-and-counting-down-to-data-leaks/
• https://www.ransomlook.io/group/scarlettgroup

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.