Threat Group Profile
moneymessage
● Active — last 30 days
Victim claims
3
First seen
May 2026
Last activity
09 Jul 2026
Tracked since
—
Group overview
Money Message emerged in March 2023 targeting Windows and Linux systems across banking, transportation, and professional services sectors, demanding ransoms in the millions and publishing stolen data on their blog if unpaid, with most known victims based in the US.
Preferred targets
Manufacturing · 1
Business Services · 1
Most targeted countries
US · 1
GB · 1
