Groove Gang
Groove Gang is a ransomware group with a financial motive, tracked by Brandefense. It targets the Diplomacy sector.
Also known as
- Orange
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
Sectors · 1
Labelsransomware
About Groove Gang.
Groove Gang is a Ransomware group primarily motivated by financial-gain. The group mainly targets unpatched Fortinet VPN infrastructure within the US and Health/Public Health (HPH) sectors and is assessed to operate with moderate sophistication. It is commonly associated with Babuk-based ransomware variants and the RAMP forum and is known for psychological operations and media manipulation.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.