Back to Threat Groups
mimic-guram
Ransomware-as-a-Serviceransomware group
Mimic v.10 Ransomware-as-a-Service (RaaS). The malware is designed to target various operating systems (Windows, ESXi, NAS, FreeBSD) and features network-wide deployment, file obfuscation, backup destruction, UAC bypass, and multithreaded encryption. The service offers additional tools like NTLM password decryption and call-based extortion. They prohibit attacks on CIS countries and require active participation, with decryption tools available for a fee currently 800USD.
Victims
0
records
First Discovered
—
victim
Last Discovered
Apr 13, 2026
victim
Inactive Since
—
—
Countries
0
hit
Group Activity
Last 12 monthsJun
2025
Jul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Victims (0)
No victims recorded
Infrastructure
No sites tracked