AttackIQ has released a new attack graph emulating the behaviors exhibited by Helldown ransomware since its emergence in August 2024. Helldown is operated by the eponymous and still largely undocumented adversary, which employs double extortion tactics by exfiltrating sensitive data prior to encrypting victim systems and threatening to leak the data on its Dedicated Leak Site (DLS)

The post Emulating the Hellish Helldown Ransomware appeared first on AttackIQ.

The post Emulating the Hellish Helldown Ransomware appeared first on Security Boulevard.

Francis Guibernau

Source: Security Boulevard
Source Link: https://securityboulevard.com/2025/04/emulating-the-hellish-helldown-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=emulating-the-hellish-helldown-ransomware