GhostLocker (e9ccb45e-da58-4c8a-950a-09526dfd49fe)
GhostLocker is a sophisticated ransomware-as-a-service (RaaS) framework developed by the GhostSec hacktivist group and promoted through a Telegram channel at an initial price of $999.00. The ransomware builder offers several options to select from such as kill processes, disable services, ransom amount, directories to encrypt, remove background, and delete malicious binaries.[Cisco Talos Blog March 5 2024][SOCRadar® Cyber Intelligence Inc. October 18 2023][Uptycs Inc November 3 2023]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| GhostSec (9d1a4d48-33b8-4f14-bec7-ef105c094297) | Tidal Groups | GhostLocker (e9ccb45e-da58-4c8a-950a-09526dfd49fe) | Tidal Software | 1 |