everest

Everest is a Russian-speaking ransomware and data extortion group active since at least 2020, known for targeting critical infrastructure, government agencies, and large enterprises across North America, Europe, and Latin America. The group employs double extortion tactics — encrypting victim systems and threatening to publish stolen data on its leak site — and has also been observed selling initial access to corporate networks. Everest is assessed to operate independently and is not known to be a rebrand of any other major group.