RansomwareFinancial
Aurora
Aurora is a ransomware group with a financial motive, tracked by Brandefense. It targets 11 sectors, including Technology and Manufacturing, in 13 countries, including the United States and the United Kingdom.
Also known as
- Aurora Ransomware
- Zorro Ransomware
- Zorro
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Apr 29, 2026
- Last seen
- Sep 7, 2026
- Record updated
Who They Target.
Sectors · 11
Countries · 13
About Aurora.
Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.