DarkVault is a data-exfiltration and double-extortion group first identified in late 2023, targeting medium-to-large organizations in finance, professional services, legal, and technology sectors across Europe, the UK, and North America, with a suspected connection to LockBit.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
DarkVault ransomware
*/
rule DarkVault_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.darkvault"
description = "Detects DarkVault ransomware ransom note"
date = "2026-05-04"
severity = 7
score = 70
strings:
$s1 = "DarkVault" ascii nocase
$s2 = "DARKVAULT" ascii
$s3 = "darkvault.onion" ascii nocase
$s4 = ".darkvault" ascii
condition:
any of them
}
Compañía especializada en organizar y programar viajes internacionales para turismo cultural, receptivo y emisivo. Fundada en México en el año 1999; nos hemos destacado como la mejor Operadora Turística en México, Argentina, Colombia y Panamá.
Developer of a promotion-sharing application designed to offer an online channel for the dissemination of offers. The company's platform allows retailers to advertise their offers to consumers who can still share these offers on their social networks, with basic information about the product, price and establishment, enabling users to buy and share deals with their network.
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| megatravel.com.mx | MX | Hospitality and Tourism | — | 15 ago 2024 |
| comoferta.com | BR | Business Services | — | 8 ago 2024 |
| mercadomineiro.com.br | BR | Business Services | — | 8 ago 2024 |
| life.vet.br | BR | Healthcare | — | 30 jun 2024 |
| decreditos.com | AR | Financial Services | — | 25 jun 2024 |
| cosimti.com | CR | Technology | — | 17 jun 2024 |
| aletech.com.br | BR | Technology | — | 7 may 2024 |
| eskarabajo.mx | MX | Transportation/Logistics | — | 6 may 2024 |
| bzrastreador.com.br | BR | Transportation/Logistics | — | 25 abr 2024 |
| qint.com.br | BR | Technology | — | 15 abr 2024 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
Mercado Mineiro is an online site that performs research, price comparison and offers virtual retail for consumers and the press.
Acting in the market since 2004 and with great experience of laboratories in the interior of the state of Rio de Janeiro. Now comes a new concept in veterinary diagnoses, Life.vet. We have as main objective the excellence in customer service, quality in transportation and sample processing, constant professional updating and new techniques in diagnostics. All this combined with cutting-edge technology in information management equipment and systems. Our new concept is based on a qualified team of veterinarians, biomedicals, production engineer and specialized technicians. All trained to provide all assistance and performing the most varied types of exams.
Decreditos provides loans through a 100% online process. In constant search and development of new products that allow easy access for all people to the financial sector. The company has branches in more than 4,000 cities and has been in business for 20 years.
Empresa boliviana lider en servicios de Seguridad de la Informacion. Las organizaciones de casi todos los sectores confían en nuestros servicios de gestión de riesgos de seguridad para disminuir su superficie de amenaza, reducir los costos de TI, impulsar la eficiencia operativa y cumplir con el cumplimiento normativo continuo. Con la combinación correcta de soluciones de control de identidad y prevención de ciberamenazas, puede proteger datos, activos y aplicaciones valiosos, optimizar y automatizar procesos manuales que requieren mucho tiempo y cumplir con los requisitos de cumplimiento y los estándares de la industria.