Cicada 3301
Cicada 3301 is a ransomware group with a financial motive, tracked by Brandefense. It targets 12 sectors, including Technology and Manufacturing, in 13 countries, including the United States and the United Kingdom.
Also known as
- Repellent Scorpius
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jun 1, 2024
- Last seen
- May 1, 2025
- Record updated
Who They Target.
Sectors · 12
Labelsbdef-qf:latestglobal
About Cicada 3301.
Cicada3301 is a ransomware-as-a-service group (tracked as Repellent Scorpius by Palo Alto) that emerged in mid-2024 using Rust-based ransomware targeting Windows, Linux, and ESXi systems, suspected to be a successor of BlackCat/ALPHV and running an affiliate program with 20% commissions.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.