Ransomware Group

Maze

Also known as: Maze Ransomware, ChaCha

Status: inactive • First seen 2019-05300+ known victims

Maze invented the tactic of stealing data before encrypting. Many groups copied their playbook.

Overview

Maze pioneered double extortion tactics before announcing retirement.

Target Industries

Healthcare, Technology, Manufacturing

How They Attack

  • Phishing
  • Exploit kits
  • RDP exploitation

Notable Victims

Cognizant (2020), Canon (2020)

Is your business exposed?

How to Protect Against Maze

  1. 1.

    Review for legacy IOCs

MITRE ATT&CK Techniques

T1566, T1486, T1041

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required