VERY IMPORTANT

Alpha ransomware first appeared in February 2023 and has strong similarities to the now-defunct NetWalker ransomware. Analysis shows code overlap between Alpha and NetWalker payloads. Both use a PowerShell-based loader and have similar execution flows, process/service killing logic, and configuration details. After initially maintaining a low profile, Alpha recently began scaling up attacks and launching a data leak site.