Ransomware Group
GoodDay
Status: active • First seen 2024-01 • 40+ known victims
GoodDay gives victims the opposite of a good day. They run a ransomware service with a professional-looking negotiation website, targeting factories and stores.
Overview
GoodDay operates a ransomware-as-a-service with an ironic name. The group provides a negotiation portal and targets manufacturing and retail sectors.
Target Industries
Manufacturing, Retail, Professional Services, Healthcare
How They Attack
- • RaaS model
- • Negotiation portal
- • Double extortion
- • SMB targeting
Notable Victims
Manufacturing firms (2024), Retail chains
Is your business exposed?
How to Protect Against GoodDay
- 1.
Understand RaaS threat landscape
- 2.
Prepare ransom negotiation procedures
- 3.
Implement manufacturing security
MITRE ATT&CK Techniques
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required