Threat actor · all actors
red ransomwareMISP-9fa719ee criminal
aka red ransomware
Last updated: 2026-10-16
5attributed CVEs
0ATT&CK techniques
13.1IDF score (tooling uniqueness)
0exclusive CVEs
2021–2025years active
About this actor
No description on file.
How we know this
- Data origin
- MISP threat-actor galaxy Imported from the open-source MISP threat-actor galaxy.
- Techniques
- No ATT&CK techniques mapped.
- Named victims
- None on file.
Thin data: No ATT&CK techniques are mapped yet — the behavioural profile is empty.
See how actor data is built for the full pipeline.
Activity timeline
CVE publishedKEV added
- 2025 — 2 CVE published, 2 KEV added
- 2023 — 1 CVE published, 1 KEV added
- 2022 — 1 KEV added
- 2021 — 2 CVE published, 1 KEV added
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
CVE-2021-44228 KEV | 10.0 | 10.0 | 1.0000 | 2021-12-10 | see CVE |
CVE-2021-20038 KEV | 9.9 | 9.8 | 0.9991 | 2021-12-08 | see CVE |
CVE-2024-55591 KEV | 9.9 | 9.8 | 0.9826 | 2025-01-14 | see CVE |
CVE-2025-24472 KEV | 8.7 | 8.1 | 0.1043 | 2025-02-11 | see CVE |
CVE-2022-24990 KEV | 8.5 | 7.5 | 0.9675 | 2023-02-07 | see CVE |
No techniques attributed.
Co-occurring actors
- AnonOps 5 shared CVEs
- COMP-MICROSOFT-SALESFORCE 5 shared CVEs
- COMP-GOOGLE-CIVIL-DEFENDANT 5 shared CVEs
- Maui ransomware 3 shared CVEs
- Lazarus Group 3 shared CVEs
- l group 3 shared CVEs
- Evil Ransomware 3 shared CVEs
- Storm-0530 3 shared CVEs
- eCh0raix 3 shared CVEs
- HiddenTear 3 shared CVEs
Similar actors
Overlapping CVEs
- HiddenTear 0.60
- Evil Ransomware 0.60
- eCh0raix 0.60
- Karakurt 0.20
- COMP-SK-INNOVATION 0.14
Active in same years
Same category
- LAPSUS$ 1.00
- Akira 1.00
- INC Ransom 1.00
- Play 1.00
- BlackByte 1.00