Dan0n
Dan0n is a ransomware group with a financial motive, tracked by Brandefense. It targets 8 sectors, including Technology and Finance, in 3 countries, including the United States and South Korea.
Also known as
- dAn0n Hacker Group
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Mar 26, 2024
- Last seen
- Aug 23, 2024
- Record updated
Who They Target.
Sectors · 8
Countries · 3
Labelsclear-web-leak-sitedan0ndark-web-leak-sitedata-brokerdata-extortionno-confirmed-encryptorransomware
About Dan0n.
dAn0n emerged in early 2024 operating a RaaS model, rapidly claiming 13 victims in May 2024 alone, predominantly targeting US-based organizations in business services and filling the vacuum left by disruptions to LockBit and BlackCat/ALPHV.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.