Attacks from 8Base Ransomware Gang Surges

Category: Ransomware News | Industries: Automotive, Business Services, Construction, Engineering, Financial, Food, Healthcare, Hospitality, Manufacturing, Non-profit, Real Estate, Technology | Source: VMware

Attacks from the 8Base ransomware gang increased significantly between May and June 2023. According to a report from VMware, when 8Base emerged in March 2022, their victim count up to May 2023 was often below 10. However, their victim count between May and June 2023 reached at least 30. The ransomware gang is reported to be targeting a wide range of industry verticals and are utilizing double extortion tactics. On the 8Base's data leak site, the hackers describe themselves as "honest and simple pentesters." Furthermore, they claim their victim list "contains only those companies that have neglected the privacy and importance of the data of their employees and customers."

In an analysis from VMWare, the 8Base ransomware gang is shown to utilize the same content as the RansomHouse ransomware gang. This is made evident from very close similarities in the group's ransom notes and sections of their data leak website. For instance, the FAQ section of the site appears to be a copy-and-paste job with minor branding tweaks. Based on VMware's analysis, 8Base is suspected of being an "off-shoot of RansomHouse or a copycat."