Skip to content
RansomwareFinancialIntermediate sophistication

Egregor

Egregor is a ransomware group with a financial motive, tracked by Brandefense. It targets organisations in 4 countries, including the United States and France.

Techniques
0
Exploited CVEs
No CVE data
Record updated

Who They Target.

About Egregor.

A Ransomware-as-a-Service (RaaS) group responsible for developing and distributing the Egregor ransomware, which has impacted over 200 companies. Its developers and team members were arrested in Ukraine.

Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.