Ralord
Low ConfidenceMedium ThreatRa Group
RaLord is an emerging ransomware operation that appeared in 2024, targeting small and medium businesses with encryption and data theft attacks. The group operates with a ransomware-as-a-service model and maintains a leak site for victim data. RaLord represents the continuing democratization of ransomware capabilities among cybercriminal groups.
RaLord is an emerging ransomware operation that appeared in 2024, targeting small and medium businesses with encryption and data theft attacks. The group operates with a ransomware-as-a-service model and maintains a leak site for victim data. RaLord represents the continuing democratization of ransomware capabilities among cybercriminal groups.
Target Sectors
Target Regions
Attributed to Cybercriminal (No State Sponsor) (Unknown). Attribution confidence: Low.
Future Outlook
Ralord is expected to continue operations targeting Manufacturing sectors.
First observed activity of Ralord
Continued active operations