Also known as BlackCat and Noberus, ALPHV emerged in November 2021 as the first ransomware family coded using the Rust programming language. To date, the ALPHV cybergang has compromised more than 100 organizations.

Likely tied to the cybercrime group behind the Darkside/Blackmatter ransomware, ALPHV operates under the Ransomware-as-a-Service (RaaS) business model, with their affiliates compromising organizations and stealing valuable information.

In their attempt to pressure victims into paying the ransom, the group engages in a “quadruple extortion” practice where they encrypt victims’ data, steal it, launch distributed denial-of-service (DDoS) attacks against victims’ public-facing assets, and harass the victims’ customers, partners, and employees.