RansomwareFinancial
Cloak
Cloak is a ransomware group with a financial motive, tracked by Brandefense. It targets 9 sectors, including Government and Manufacturing, in 19 countries, including the United States and the United Kingdom.
Also known as
- cloak Team
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2023
- Last seen
- Jun 18, 2026
- Record updated
Who They Target.
About Cloak.
Cloak is a ransomware-as-a-service operation active since late 2022, primarily targeting small-to-medium enterprises in Europe, especially Germany, across manufacturing, healthcare, education, and government sectors, with expansion into North American and Asian targets by 2025.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.