3am
ACTIVEransomware group
3AM, also known as ThreeAM, is a relatively new ransomware family that emerged in late 2023, initially deployed as a fallback option when LockBit infections failed. Written in Rust for 64-bit systems, it appends the “.threeamtime” extension to encrypted files and tags them with the marker “0x666,” while deleting Volume Shadow Copies to hinder recovery. 3AM operators use a double extortion strategy, combining file encryption with data theft and threats to leak stolen information. More recent campaigns have shown increased sophistication, incorporating email bombing followed by vishing calls to convince victims to grant remote access via Microsoft Quick Assist. Attackers then deploy virtual machines containing backdoors, allowing them to remain undetected while exfiltrating data before attempting to launch the ransomware payload.
Group Activity
Last 12 monthsVictims (15)
Fleetworks Inc.
Fleetworks Inc. offers comprehensive heavy-duty truck repair and fleet services across California, with locations in Oakland, Santa Fe Springs, and Riverside. T...
St James' Anglican School
St James’ Anglican School provides a holistic education for students from Kindergarten to Year 12, focusing on unlocking individual potential and fostering exce...
BHN Expertise
BHN Expertise is an accounting firm that helps businesses manage their financial records and grow smartly. With offices across Normandy in cities like Bolbec, C...
Apexus
Apexus, founded in 2007, is a business services company that manages the 340B Prime Vendor Program supporting the 340B Drug Pricing Program. The company negotia...
Midwest Business Technology
Midwest Business Technology specializes in providing customized IT solutions and services to businesses and government agencies across the U.S. Their offerings ...
pistonespersan.com.ar
Pistones Persan specializes in high-performance pistons and accessories, offering over 600 products from 53 brands. The company is certified under ISO standards...
Coosalud Entidad Promotora de Salud S.A.
Coosalud EPS (Coosalud Entidad Promotora de Salud S.A.) is one of the major health promotion entities (EPS) in Colombia, primarily managing subsidized and contr...
Safe Scaffolding
Safe Scaffolding is a privately held contractor operating primarily in the commercial and residential construction industry. The company provides physical scaff...
newmantractor.com
Since 1976, Newman Tractor has been serving the heavy equipment industry both domestically, and internationally. Originally founded as a farm equipment business...
wmdn.net
Twin States News is a media organization that provides comprehensive coverage of local, state, national, and world news. Their services include reporting on var...
mecasem.org
The group gives quality and reliability the highest priority in the through execution of all its business activities. Therefore MECASEM provides a wide range of...
clubonecasino.com
Club One Casino is the premier poker room in Central California, featuring 51 table games, a 24-hour restaurant, and extensive non-gaming entertainment options ...
tws-tac.net
While ownership has changed over the years, the company has remained locally owned for over 65 years and family-owned for almost 40 years. The company is proud ...
guardianbarrierservices.com
Guardian Barrier Services provides a wide range of products and services for events, including crowd control barriers, cable ramps, truss structures, and tempor...
acemacon.org
The Academy for Classical Education is dedicated to fostering knowledge and critical thinking skills in children, preparing them to be independent learners for ...
Infrastructure
http://threeam7fj33rv5twe5ll7gcrp3kkyyt6ez5stssixnuwh4v3csxdwqd.onion/4920ms
9m ago
unreachable
http://ulkvlj5sirgrbnvb4hvbjo2ex2c2ceqe2j4my57fcdozpbq5h5pyu7id.onion8518ms
12h ago