RansomHouse
RansomHouse is a ransomware group with a financial motive, tracked by Brandefense. It targets 19 sectors, including Government and Technology, in 50 countries, including the United States and the United Kingdom. It uses 20 MITRE ATT&CK techniques.
Also known as
- ransomhouse Team
- Techniques
- 20
- Exploited CVEs
- No CVE data
- First seen
- Jun 1, 2021
- Last seen
- Sep 1, 2026
- Record updated
Who They Target.
Sectors · 19
Countries · 50
Labelsdata-extortiondata-leak-siteencryptionless-extortionransomhouseransomware
About RansomHouse.
RansomHouse is a double-extortion RaaS operation active since late 2021, attributed to the threat actor "Jolly Scorpius," targeting over 120 organizations across healthcare, finance, transportation, and government, recently upgrading to a multi-layered dual-key encryption architecture.
Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.