Back to Threat Groups
deathgrip
Ransomware-as-a-Serviceransomware group
DeathGrip is a Ransomware-as-a-Service (RaaS) that emerged around June 2024, offering malware payloads built with leaked LockBit 3.0 and Yashma/Chaos builders. Designed to lower technical barriers, it enables even low-skilled operators to deploy highly capable ransomware attacks. DeathGrip campaigns typically employ AES-256 encryption, delete shadow copies and recovery features, and modify system settings to hinder restoration. Earlier infections include low-tier ransom demands (e.g., around $100), reflecting entry-level targeting, though its flexible tooling allows a range of payload configurations.
Victims
0
records
First Discovered
—
victim
Last Discovered
Apr 13, 2026
victim
Inactive Since
—
—
Countries
0
hit
Group Activity
Last 12 monthsJun
2025
Jul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Victims (0)
No victims recorded
Infrastructure
No sites tracked