Derp.ca
Ransomware group

ARCrypter

ChileLocker (also known as ARCrypter) first appeared in August 2022 after attacking a Chilean government agency and quickly expanded globally, appending a ".crypt" extension to encrypted files and recruiting affiliates under a RaaS model on criminal forums.

Profile source: Mallory opens in a new tab

ARCrypter

Family profile

ChileLocker (also known as ARCrypter) first appeared in August 2022 after attacking a Chilean government agency and quickly expanded globally, appending a ".crypt" extension to encrypted files and recruiting affiliates under a RaaS model on criminal forums.

Ransomware.live

Operational record

View group record ↗
1
YARA rules
3
Ransom notes
1
Leak sites
0 available

Reporting

Research mentioning ARCrypter

Sep 14
Sekoia

Sekoia.io mid-2023 Ransomware Threat Landscape

...emerging ransomware operations, such as ARCrypter, RTM Locker and DumpLocker, claimling to exfiltrate victim’s data before encryption...

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

adam:ONE opens in new tab Tria.ge opens in new tab IPinfo opens in new tab urlscan.io opens in new tab eCrime.ch opens in new tab Mallory opens in new tab