{"id":1864,"date":"2025-01-23T14:33:12","date_gmt":"2025-01-23T14:33:12","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/23\/experts-link-morpheus-hellcat-ransomware-to-shared-codebase\/"},"modified":"2025-01-23T14:33:13","modified_gmt":"2025-01-23T14:33:13","slug":"experts-link-morpheus-hellcat-ransomware-to-shared-codebase","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/experts-link-morpheus-hellcat-ransomware-to-shared-codebase\/","title":{"rendered":"Experts Link Morpheus, HellCat Ransomware to Shared Codebase"},"content":{"rendered":"\n<\/p>\n

Ransomware Alert: HellCat and Morpheus Ransomware Operations Linked to Identical Code<\/strong><\/p>\n

Date:<\/strong> January 23, 2025<\/p>\n

Author:<\/strong> Ravie Lakshmanan<\/p>\n

Categories:<\/strong> Threat Intelligence, Data Breach<\/p>\n

<\/a><\/div>\n

Analysis of HellCat and Morpheus Ransomware Operations Reveals Identical Code<\/strong><\/p>\n

A recent analysis by SentinelOne has revealed that affiliates associated with the HellCat and Morpheus ransomware entities are using identical code for their ransomware payloads. This finding comes from artifacts uploaded to the VirusTotal malware scanning platform by the same submitter towards the end of December 2024.<\/p>\n

Identical Payload Samples<\/strong><\/p>\n

According to Jim Walter, a security researcher at SentinelOne, the two payload samples are identical except for victim-specific data and the attacker contact details. This suggests a high level of coordination and cooperation between the two groups.<\/p>\n

Ransomware Attacks on the Rise<\/strong><\/p>\n

The rise of new and aggressive actors, such as FunkSec, has led to a significant increase in ransomware attacks. In December 2024, a record 574 ransomware attacks were observed, with FunkSec accounting for 103 incidents. Other prevalent ransomware groups include Cl0p (68), Akira (43), and RansomHub (41).<\/p>\n

Threat Landscape<\/strong><\/p>\n

The increase in ransomware attacks is alarming and suggests a more turbulent threat landscape heading into 2025. "December is usually a much quieter time for ransomware attacks, but last month saw the highest number of ransomware attacks on record, turning that pattern on its head," said Ian Usher, associate director of Threat Intelligence Operations and Service Innovation at NCC Group.<\/p>\n

Conclusion<\/strong><\/p>\n

The use of identical code by HellCat and Morpheus ransomware entities highlights the need for increased vigilance and cooperation in the fight against cybercrime. As the threat landscape continues to evolve, it is essential to stay informed and up-to-date on the latest developments in ransomware attacks.<\/p>\n

Follow Us<\/strong><\/p>\n

Found this article interesting? Follow us on Twitter \uf099<\/i> and LinkedIn to read more exclusive content we post.<\/p>\n