d4rk4rmy
Intelligence Profile
D4rk4rmy is a ransomware and data extortion group active since at least 2025, targeting financial services, hospitality, technology, and logistics sectors, operating a RaaS model with notable claimed victims including the Monte Carlo casino resort.
Threat Analysis
d4rk4rmy is a ransomware operation that deploys encryption-based extortion against organizations globally. This group maintains a data leak site (DLS) to pressure victims into paying ransom demands.
Financially motivated threat actors like d4rk4rmy prioritize monetary gain through methods such as ransomware deployment, banking trojans, cryptocurrency theft, BEC scams, or credential harvesting for resale on underground markets.
Ransomware Victims (18)
CTIWATCH tracks 18 organizations claimed as victims by d4rk4rmy on its data leak site, with attack dates, sectors and countries.
View full victims list →