Radar — Ransomware Profile

Radar (also known as Dispossessor), active since August 2023 and led by an actor called "Brain," was a RaaS group targeting small-to-mid-sized businesses across healthcare, education, finance, and transportation in over 14 countries; it was dismantled by an FBI-led international operation in August 2024 that seized 24 servers and 9 criminal domains. A leak site under the RADAR brand resurfaced in September 2025 and has posted new victims through at least April 2026; WatchGuard tracks it as a formalization of Dispossessor's Radar alias and classifies it as a data broker focused on extortion.

Recent claimed victims

Bentley Capital Ventures 2026-04-29

Vendor research

Learnings From The Dispossessor Ransomware Leak Defused
Dark Web Profile: Dispossessor Ransomware SOCRadar
Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit SentinelOne (SentinelLabs)
International Investigation Leads to Shutdown of Ransomware Group FBI Cleveland Field Office

Read the full analysis on IntelFusions