Cyntari
Beta
All threat actors

Crypto24

Alert me

A financially motivated ransomware operation first observed in 2024. Its intrusions use legitimate administration tools, custom defense-evasion tooling such as RealBlindingEDR, cloud storage for exfiltration, and file encryption to extort large organizations.

Also known as

Crypto24 ransomware operators

Create a free account to see the reports

Sign in or create a free account to see every report that names Crypto24.

Create free account