ALPHV Ransomware and Digital Extortion Analysis

This technical report provides an analysis of ALPHV, a prominent ransomware strain involved in ransomware and digital extortion (R&DE) activities from January 2022 to October 2023. It outlines key findings regarding ALPHV's operational trends, noting a slight decrease in its attack frequency as newer threat collectives emerge. The report details ALPHV's attack methods, including exploitation of internet-facing applications and social engineering techniques such as phishing. It also discusses the ransomware's subscription-based model and its use of the Rust programming language, which enhances its operational efficiency. The report highlights the geographical targeting of ALPHV, particularly in North America, where it has been a significant threat, accounting for approximately 11 percent of R&DE incidents in the region. The analysis indicates that while ALPHV's prominence may be challenged by new collectives, it is expected to remain a notable threat in the near future.