Crypto24 — Ransomware Profile
Crypto24 is a double-extortion ransomware-as-a-service group that surfaced on the RAMP forum in mid-2024, targeting large organizations in financial services, healthcare, manufacturing, and technology across Asia, Europe, and North America, with notable victims including CMC Group, Vietnam's second-largest ICT conglomerate.Recent claimed victims
- Qatar Biomedical Research Institute (QBRI) 2026-04-17
- Industrias Guerra, S.A. 2026-04-02
- Katcon Global 2026-04-02
- ActionPower 2026-03-27
- Estudio O'Farrell 2026-03-24
Vendor research
- Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks Trend Micro
- Crypto24 Ransomware Uncovered: Stealth, Persistence, and Enterprise-Scale Impact Picus Security (Picus Labs)
- Crypto24 Halcyon