Dark Angels Team Ransomware Group

Actor Type Criminal Group

Dark Angels Team reportedly emerged in May 2022 having developed a strain of ransomware based on previously leaked Babuk builders. They subsequently added additional capabilities to target Linux and ESXi. The group leaves ransom notes signed 'by DARK ANGELS TEAM !'.

The Dark Angels ransomware group has been observed targeting a range of industries including manufacturing, education, healthcare, government and finance.

Cyber Threat Graph Context

Explore how this Intrusion Set relates to the wider threat graph

References