Ransomware Group
Alpha Locker
Also known as: Alpha
Status: active • First seen 2023-02 • 60+ known victims
Alpha Locker attacks through Citrix vulnerabilities, which many companies use for remote access. They move fast once inside, encrypting everything before IT teams can respond.
Overview
Alpha Locker exploits Citrix NetScaler vulnerabilities to rapidly compromise healthcare and technology networks before deploying fast-encrypting ransomware.
Target Industries
Healthcare, Technology, Finance, Professional Services
How They Attack
- • NetScaler exploitation
- • Fast encryption
- • Double extortion
- • Citrix targeting
Notable Victims
Healthcare networks (2023), Technology firms
Is your business exposed?
How to Protect Against Alpha Locker
- 1.
Patch Citrix immediately
- 2.
Monitor Citrix logs for anomalies
- 3.
Implement rapid incident response
MITRE ATT&CK Techniques
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required