Skip to content
Ransomware group

DarkVault

DarkVault is a ransomware threat actor referenced in Dragos’s Q1 2025 ransomware threat landscape reporting.

Profile source: Mallory opens in a new tab

DarkVault

Family profile

DarkVault is a ransomware threat actor referenced in Dragos’s Q1 2025 ransomware threat landscape reporting. In the provided content, DarkVault is only mentioned briefly as accounting for 1 incident (“DarkVault… Each accounted for 1 incident”). No additional high-confidence details are provided in the source regarding its targets, tactics, techniques, geographic focus, affiliations, sub-groups, or attribution to a nation state. Known alias in the provided content: darkvault.

Ransomware.live

Operational record

View group record ↗

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.