Skip to content
Ransomware group

LV

LV ransomware group is a ransomware threat actor referenced in reporting on MITRE ATT&CK T1078.002 (Valid Accounts: Domain Accounts).

Profile source: Mallory opens in a new tab

LV

Family profile

LV ransomware group is a ransomware threat actor referenced in reporting on MITRE ATT&CK T1078.002 (Valid Accounts: Domain Accounts). The provided content states that Picus Labs identified the group gaining domain administrator privileges through compromised domain administrator credentials. This indicates use of legitimate domain accounts for privilege escalation and access within Active Directory environments. No additional aliases, sub-groups, targeting details, or attribution are provided in the available content beyond the alias/name "lv" and the reference to it as the LV ransomware group.

Ransomware.live

Operational record

View group record ↗

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.