Ransomware Group
CryptoViper
Also known as: Viper, CV-Ransom
Status: active • First seen 2024-05 • 300+ known victims
CryptoViper runs a criminal business selling ransomware tools to other hackers. They give their partners most of the ransom money to attract skilled criminals.
Overview
CryptoViper is a ransomware-as-a-service operation known for aggressive affiliate programs and rapid encryption speeds. They offer competitive revenue splits to attract skilled affiliates.
Target Industries
Healthcare, Education, Retail, Professional Services
How They Attack
- • RaaS model
- • Rapid encryption
- • Affiliate program
- • Double extortion
Notable Victims
Healthcare networks (2024), School districts (2025)
Is your business exposed?
How to Protect Against CryptoViper
- 1.
Implement email authentication
- 2.
Deploy EDR with ransomware protection
- 3.
Test backup restoration procedures
MITRE ATT&CK Techniques
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required