Reportseverity: Medium2021-11-01
ALPHV/BlackCat Rust-based RaaS first observed
published by MITRE ATT&CK
Actor
Russian-speaking ransomware-as-a-service operation, first observed November 2021, notable as the first prominent ransomware family written in Rust. Operated the affiliate program responsible for the…
Summary
MITRE ATT&CK records the BlackCat (a.k.a. ALPHV, Noberus) ransomware-as-a-service as first observed in November 2021. Written in Rust, it was among the first cross-platform ransomware families to ship native Windows, Linux, and ESXi builds, and is linked by researchers to the BlackMatter / DarkSide lineage.
Tags
ransomwareraasrustemergence
Primary source
attack.mitre.orgOther ALPHV/BlackCat events
- 2025-11-19Two U.S. cybersecurity workers plead guilty to ALPHV BlackCat affiliate scheme
- 2024-03-05ALPHV BlackCat shuts down in apparent exit scam after Change Healthcare payment
- 2024-02-21Change Healthcare ransomware incident attributed to ALPHV BlackCat
- 2023-12-19FBI-led international operation seizes ALPHV infrastructure and releases decryptor
- 2023-12-19Joint CISA/FBI/HHS advisory AA23-353A on ALPHV BlackCat