Skip to content
brandefense.io
Request A Demo
RansomwareFinancial

Karakurt

Karakurt is a ransomware group with a financial motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 9 countries, including the United States and India.

Also known as
  • Mushy Scorpius
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jan 1, 2021
Record updated

Who They Target.

Sectors · 13
Countries · 9

About Karakurt.

Karakurt is a pure data-extortion group (no encryption) assessed with high confidence to be the extortion arm of the Conti ransomware group, active from 2021, that steals data and threatens to auction or publish it unless ransoms ranging from $25,000 to $13 million are paid.

Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.