Threat Group Profile
moneymessage
Dormant / historical
Victim claims
5
First seen
May 2026
Last activity
25 Jul 2026
Tracked since
Mar 2023
Group overview
Money Message emerged in March 2023 targeting Windows and Linux systems across banking, transportation, and professional services sectors, demanding ransoms in the millions and publishing stolen data on their blog if unpaid, with most known victims based in the US.
Preferred targets
Manufacturing · 1
Business Services · 1
Energy & Utilities · 1
Transportation · 1
Most targeted countries
US · 3
GB · 1