Skip to content
RansomwareEspionageIntermediate sophistication · Informal collective

Crypto24

Crypto24 is a ransomware group with an espionage motive, tracked by Brandefense. It targets 10 sectors, including Technology and Manufacturing, in 25 countries, including the United States and the United Kingdom.

Techniques
0
Exploited CVEs
No CVE data
Record updated

Who They Target.

About Crypto24.

Crypto24 is a double-extortion ransomware-as-a-service group that surfaced on the RAMP forum in mid-2024, targeting large organizations in financial services, healthcare, manufacturing, and technology across Asia, Europe, and North America, with notable victims including CMC Group, Vietnam's second-largest ICT conglomerate.

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.