Threat Actor Interplay | Good Day’s Victim Portals and Their Ties to Cloak
released on 2023-08-30 @ 04:29:44 PM
Good Day ransomware, a variant within the ARCrypter family, was first observed in-the-wild in May of 2023. Between June and August of 2023, we observed an uptick in Good Day ransomware campaigns and a proliferation of new ransom note samples in public malware repositories. This new wave of Good Day attacks feature individual TOR-based victim portals for each target.