Black Cat (ALPHV) Overview

BlackCat’s RaaS operation was first seen in 2021. Two things about ALPHV outstand: it
seems to be the first ransomware written in Rust, and seems to employ ex-operators from
Darkside.

Their ransomware is complex, allowing to mutate its build multiple times to avoid signature
detection, while also targeting multiple systems including hypervisors like ESXi.
Their victims are high profile ones, like Ecuador’s capital government (Quito Government),
Bandai Namco, Transportadora de Gas del Sur (South Gas Transporter – Argentina) andlately a breast cancer clinic, where they leaked patient records including topless photographs originally taken with medical purposes