Skip to content
brandefense.io
Request A Demo
RansomwareFinancialIntermediate sophistication · Small team

Robinhood

Robinhood is a ransomware group with a financial motive, tracked by Brandefense. It targets the Diplomacy sector. It uses 14 MITRE ATT&CK techniques.

Also known as
  • HelpYemen
Request IOC feedRequest ATT&CK export
Techniques
14
Exploited CVEs
No CVE data
Last seen
Jan 31, 2020
Record updated

Who They Target.

Sectors · 1
Labelsransomware

About Robinhood.

RobbinHood is a ransomware group first observed in April-May 2019, responsible for high-profile attacks on US cities including Baltimore, Maryland, demanding 13 BTC and causing months of disruption to city services, believed to operate as a limited closed-circle model rather than a broad public affiliate program.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.