8Base Ransomware (88a5435f-5586-4cb4-a9c0-1961ee060a67)
The 8Base ransomware operation began claiming significant numbers of victims on its data leak site in June 2023, including organizations in a range of sectors. Researchers have observed considerable similarities between aspects of 8Base's operations and those of other ransomware groups, leading them to suspect that 8Base may be an evolution or offshoot of existing operations. The language in 8Base's ransom notes is similar to the language seen in RansomHouse's notes, and there is strong overlap between the code of Phobos ransomware and 8Base.[VMWare 8Base June 28 2023][Acronis 8Base July 17 2023]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| 8Base Ransomware (88a5435f-5586-4cb4-a9c0-1961ee060a67) | Tidal Software | 8Base Ransomware Actors (00b45c13-d165-44d0-ad6b-99787d2a7ce3) | Tidal Groups | 1 |