Ransomware Dark Angel Victim: Array Networks

The Infamous Ransomware Dark Angel Victim: Array Networks in a recent cyber attack, raising concerns about cybersecurity vulnerabilities. To stay ahead of emerging threats, fortify your online security with the HookPhish Dark Web Monitoring platform. Explore HookPhish Dark Web Monitoring.

Victim Name	Array Networks
Screenshots of Files Available	YES
Detailed List of Files and content available?	N/A
Post Date	February 28, 2024
Download Links to Exfiltrated Data Dump Files?	N/A

Disclaimer: HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any files or stolen information. Any legal concerns regarding the content should be directed at the attackers, not HookPhish. This blog is dedicated to posting editorial news, alerting readers about companies falling victim to ransomware attacks. HookPhish has no affiliation with ransomware threat actors or groups, and it does not host infringing content. The information on this page is automatically generated and redacted, sourced directly from the Onion Dark Web Tor Blogs pages.

Dark Angels Ransomware Group

The Dark Angels ransomware group is a cybercriminal organization that emerged in May 2022. They are known for their double extortion tactics, which involve not only encrypting the victim’s files but also stealing data and demanding payment to prevent its release. The group’s code for Windows-focused payloads is derived from the leaked Babuk builders, with nearly identical features. In late 2023, they developed payloads targeting Linux/ESXi systems, which are not derived from Babuk but have a bespoke codebase similar to RagnarLocker. Dark Angels has targeted various industries, including healthcare, government, finance, and education. In September 2023, they attacked Johnson Controls, an automation and manufacturing company, and locked their VMWare ESXi servers. Detection of Dark Angels ransomware requires a combination of technical and operational measures to identify suspicious network activity. SentinelOne’s Singularity XDR Platform can identify and stop activities related to Dark Angels ransomware.

Citations:

• [1] https://www.sentinelone.com/anthology/dark-angels-team-ransomware/
• [2] https://www.sentinelone.com/blog/dark-angels-esxi-ransomware-borrows-code-victimology-from-ragnarlocker/
• [3] https://www.bleepingcomputer.com/news/security/building-automation-giant-johnson-controls-hit-by-ransomware-attack/

Disclaimer: HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any files or stolen information. Any legal concerns regarding the content should be directed at the attackers, not HookPhish. This blog is dedicated to posting editorial news, alerting readers about companies falling victim to ransomware attacks. HookPhish has no affiliation with ransomware threat actors or groups, and it does not host infringing content. The information on this page is automatically generated and redacted, sourced directly from the Onion Dark Web Tor Blogs pages.