karakurt

Karakurt is a ransomware operation associated with extortion-focused campaigns and is also known by the aliases TommyLeaks and SchoolBoys Ransomware. ThreatCluster has recorded zero victims claimed by Karakurt, and the sectors hit and countries affected are not recorded. A pattern in the reporting is extortion activity linked to Karakurt’s network, illustrated by a Latvian ransom negotiator’s 8.5-year federal sentence for involvement in a Karakurt-linked extortion scheme that encompassed over 54 attacks and about $56 million in ransom.