ALP-001 — Ransomware Profile
ALP-001 is a leak-site brand whose victim claims did not survive scrutiny, and we list none of them. The tracker we ingest annotates it as unreliable, states that most if not all of its alleged victims cannot be verified, and has announced that it is removing the group's entries altogether. ReliaQuest reached the same view independently, grouping ALP-001 with 0APT as newly emerged but likely fake leak sites that highly likely used questionable or fabricated leak claims, under a heading of scam-style extortion. We had imported 17 listings spanning twelve countries before that assessment was available, and all 17 have been withdrawn. What remains unresolved is the operator rather than the claims: a brand can be fabricated while the person running it is a real criminal recycling other people's material, and nothing published so far settles which is the case here. The profile is kept as a record of the brand and as a marker that its claims are not evidence of anything. Treat any listing attributed to ALP-001 as unverified until an affected organisation or a vendor confirms it independently.
IntelFusions coverage (1)
Vendor research
Read the full analysis on IntelFusions