Analyzing the Evolution of One of the Most Active Data Extortion Threat Groups on the Dark Web Introduction The paradigm of cybercrime monetization has undergone a fundamental structural shift over the past several years, driven by the decline of traditional, file-locking ransomware execution and the rise of highly targeted, non-encrypting data extortion. Historically, threat actors prioritized the deployment of symmetric and asymmetric encryption algorithms to lock local sys
