HOMETHREATSarcus media
APT / THREAT GROUP💰 FINANCIAL

arcus media

14
victims
1
aliases

Intelligence Profile

arcus media — tracked by MISP Galaxy (ransomware).

Threat Analysis

arcus media is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of financial.

Financially motivated threat actors like arcus media prioritize monetary gain through methods such as ransomware deployment, banking trojans, cryptocurrency theft, BEC scams, or credential harvesting for resale on underground markets.

Ransomware Victims (14)

CTIWATCH tracks 14 organizations claimed as victims by arcus media on its data leak site, with attack dates, sectors and countries.

View full victims list →

External References

Quick Facts

TypeAPT / Threat Group
Motivation💰 financial
Aliases1

Also Known As

arcus media

DLS Infrastructure

● ONLINEarcuufpr5xxbbkin4mlidt7itmr6znlppk63jbtkeguuhszmc5g7qdyd.onion

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.