Threat actor · all actors
SuchSecurity RansomwareMISP-22481dfd criminal
aka SuchSecurity Ransomware, Such Security
Last updated: 2026-10-16
1attributed CVEs
0ATT&CK techniques
3.2IDF score (tooling uniqueness)
0exclusive CVEs
2021–2026years active
About this actor
This is most likely to affect English speaking users, since the note is written in English. English is understood worldwide, thus anyone can be harmed. The hacker spread the virus using email spam, fake updates, and harmful attachments. All your files are compromised including music, MS Office, Open Office, pictures, videos, shared online files etc..
How we know this
- Data origin
- MISP threat-actor galaxy Imported from the open-source MISP threat-actor galaxy.
- Techniques
- No ATT&CK techniques mapped.
- Named victims
- None on file.
Thin data: No ATT&CK techniques are mapped yet — the behavioural profile is empty.
See how actor data is built for the full pipeline.
Activity timeline
CVE publishedKEV added
- 2026 — 1 KEV added
- 2021 — 1 CVE published
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
CVE-2021-22681 KEV | 9.9 | 9.8 | 0.6363 | 2021-03-03 | see CVE |
No techniques attributed.
Co-occurring actors
- Cyber Av3ngers 1 shared CVEs
- AnonOps 1 shared CVEs
- Soldiers of Solomon 1 shared CVEs
- Storm-0784 1 shared CVEs
Similar actors
Overlapping CVEs
- Soldiers of Solomon 1.00
- Storm-0784 1.00
- Cyber Av3ngers 1.00
- AnonOps 0.00
Active in same years
Same category
- LAPSUS$ 1.00
- Akira 1.00
- INC Ransom 1.00
- Play 1.00
- BlackByte 1.00