Devman Ransomware (0f3de387-e3de-440a-9d73-1371a9dfcadf)
Although few details about its capabilities have been reported, security researchers indicate that the Devman ransomware group leverage custom encryptor software, which applies the “.devman1” extension to encrypted files, during actors' attacks.[Cyble Safepay Devman June 3 2025][AhnLab Dark Web Trends June 10 2025] This object represents the relationships and other details associated with this malware.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Devman Ransomware (0f3de387-e3de-440a-9d73-1371a9dfcadf) | Tidal Software | Devman Ransomware Group (b7b61ba1-7b0c-4568-a5ee-8b6634ed5b60) | Tidal Groups | 1 |