Crypto24
ObscureIQ Threat Intelligence · Actor Profile
Crypto24Confidence: Medium
Ransomware (RaaS)
Motivation: Financial
1Attributed Breaches Circulating
MediumAttribution Confidence
Ransomware (RaaS)Actor Type
Overview
Blends legitimate/LOLBin tooling with custom malware and advanced EDR-evasion techniques (Trend Micro), emerging in early 2025 with double extortion against financial services, healthcare, logistics, and technology in Malaysia, Colombia, Egypt, and India.
Tactics, Targeting & TTPs
Blends legitimate/LOLBin tooling with custom malware and advanced EDR-evasion techniques (Trend Micro).
Source
Attribution draws on public threat-intelligence reporting · Established (multi-source). Primary source →
Were you exposed in one of these breaches?
Check your exposure privately, or request a tailored exposure audit.