RansomwareFinancial
Arcus Media
Arcus Media is a ransomware group with a financial motive, tracked by Brandefense. It targets 13 sectors, including Technology and Manufacturing, in 18 countries, including the United States and France.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- May 1, 2024
- Last seen
- Aug 24, 2026
- Record updated
Who They Target.
Sectors · 13
Countries · 18
Arsenal · Malware And Tools.
- Arcus Mediamalware
About Arcus Media.
Arcus Media is a ransomware-as-a-service group that emerged in May 2024, employing double extortion with ChaCha20 + RSA-2048 encryption and recruiting affiliates via a referral-based vetting process, claiming 50+ victims across manufacturing, healthcare, retail, and business services globally.
Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.