FunkSec — Ransomware Profile
Funksec is an extortion group that has claimed victims across various sectors, including media, IT, and education, operating a Tor-based DLS to centralize its ransomware activities. The group advertises a free DDoS tool and may develop its own ransomware binary, indicating significant technical capability. The DLS was likely created in late November to early December 2024, with the first advertisement titled Funksec Ransomware posted on 3 December 2024. Currently, there is limited publicly available information on Funksec's TTPs, and it is not known to be associated with any other threat groups.Also tracked as
FunkLocker
IntelFusions coverage (2)
- Unit 42 found 97% of AI malware never leaves the lab 2026-08-25 · AI Security
- Qilin ransomware lists Argentina's army on its leak site 2026-07-25 · Ransomware
Tools & malware
- Funkgenerator Password tool
- FunkLocker Ransomware
- JQRAXY RAT RAT
- Scorpion DDoS tool
Recent claimed victims
- semaphore.asso.fr 2025-03-18
- Sanirent 2025-03-15
- unimore.it 2025-03-12
- extremeperformance.com 2025-03-12
- isee-eg.com 2025-03-11
- klabs.it 2025-03-09
- univ-rennes.fr 2025-03-08
- Sorbonne Université 2025-03-07
- cimenyan.desa.id 2025-03-04
- mytower.com.br 2025-02-28
- Moon 2025-02-28
- jastreet.com 2025-02-28
- isurges.com 2025-02-28
- mandarin.com.br 2025-02-28
- stayzapp.in 2025-02-28
- Rossman Media 2025-02-19
- footballticketnet.com 2025-02-18
- hiway.com.br 2025-02-17
- avtovelomoto.by 2025-02-12
- phidac.be 2025-02-08
- herbalcanadaonline.com 2025-02-07
- IAAGlobal, the International Advertising Association, 2025-02-07
- autogedal.ro 2025-02-07
- Rattel Academy 2025-02-05
- cara.com.my 2025-02-05
Vendor research
- FunkLocker Ransomware: In-Depth Analysis, Detection, Mitigation SentinelOne
- Protection Bulletin: Funksec Ransomware Symantec (Broadcom)
- FunkSec: An AI-Centric and Affiliate-Powered Ransomware Group Bitdefender
- FunkSec – Alleged Top Ransomware Group Powered by AI Check Point Research
- Funksec Ransomware Teams Up with Another Ransomware Group to Double Down on Targets SonicWall Capture Labs Threat Research
- FunkSec's FunkLocker: How AI Is Powering the Next Wave of Ransomware ANY.RUN
- Decrypted: FunkSec Ransomware Gen Digital (Avast Threat Labs)
Countries linked to this actor
- Algeria origin