RansomwareFinancial
DarkVault
DarkVault is a ransomware group with a financial motive, tracked by Brandefense. It targets 15 sectors, including Government and Technology, in 25 countries, including the United States and the United Kingdom.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2023
- Last seen
- Jan 6, 2025
- Record updated
Who They Target.
Sectors · 15
Labelsdarkvaultransomware
About DarkVault.
DarkVault is a data-exfiltration and double-extortion group first identified in late 2023, targeting medium-to-large organizations in finance, professional services, legal, and technology sectors across Europe, the UK, and North America, with a suspected connection to LockBit.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.