Groove
Ransomware Group Profile
Overview
Groove emerged in mid-2021 as a loose criminal collective linked to former Babuk gang members, known for publicly leaking Fortinet VPN credentials to attract affiliates and calling for attacks on US government and financial targets; the group later claimed its entire operation was a hoax to mislead security researchers.
Dark Web Infrastructure (1)
ws3dh6av66sjbxxkjpw5ao3wqzmtejnkzheswm4dz5rrwvular7xvkqd.onion
Activity Timeline
First Seen2021
Last Seen2021
Leak Sites1
Quick Actions