Funksec
Funksec is a ransomware group with a financial motive, tracked by Brandefense. It targets 16 sectors, including Government and Technology, in 65 countries, including the United States and the United Kingdom. It uses 23 MITRE ATT&CK techniques.
Also known as
- funksec Team
- Techniques
- 23
- Exploited CVEs
- No CVE data
- First seen
- Dec 3, 2024
- Last seen
- Mar 19, 2025
- Record updated
Who They Target.
Sectors · 16
Countries · 65
Labelsai-assisted-developmentdls-claim-quality-riskdouble-extortionhacktivist-overlapinactive-q2-2025low-ransom-demandsraasransomware
About Funksec.
FunkSec is an AI-assisted ransomware-as-a-service group that launched its data leak site in December 2024 and rapidly claimed over 85 victims across government, technology, finance, and education sectors globally, demanding unusually low ransoms and using AI tooling to lower the technical bar for affiliates.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.