A new ransomware group known as “Money Message” has emerged, attacking victims all over the world and demanding $1 million in ransom payments to prevent data leaks and the release of a decryptor. On March 28, 2023, a victim posted the first information on the new ransomware on the BleepingComputer forums. Soon after, Zscaler’s ThreatLabz tweeted about it.
On its extortion website, the threat actor now names two victims, one of which is an Asian airline with annual sales of about $1 billion. The threat actors further assert that they have taken files from the business and provide a screenshot of the file system that was accessed as evidence of the hack.