Skip to content
CybercrimeFinancialAdvanced sophistication

Jolly Scorpius

Jolly Scorpius is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 4 MITRE ATT&CK techniques.

Techniques
4
Exploited CVEs
No CVE data
First seen
Dec 19, 2025
Last seen
Dec 19, 2025
Record updated

About Jolly Scorpius.

A cybercriminal group operating the RansomHouse Ransomware-as-a-Service (RaaS) platform. Active since December 2021, they have publicly claimed at least 123 victims and consistently employ a double extortion model.

Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.