Snatch
Snatch is a ransomware group with a financial motive, tracked by Brandefense. It targets 18 sectors, including Government and Technology, in 21 countries, including the United States and the United Kingdom.
Also known as
- snatch Team
- Team Truniger
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2018
- Last seen
- Jun 2, 2024
- Record updated
Who They Target.
Sectors · 18
Countries · 21
Labelsbdef-qf:trendingcross-claim-riskdata-reusedormant-public-reportingdouble-extortionraasransomhouse-contextransomwaresafe-mode-boot
About Snatch.
Snatch is a ransomware which infects victims by rebooting the PC into Safe Mode. Most of the existing security protections do not run in Safe Mode so that it the malware can act without expected countermeasures and it can encrypt as many files as it finds. It uses common packers such as UPX to hide its payload.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.